Overview

overview

10

Static

static

10

56b8d7edb6...a0.exe

windows7-x64

9

56b8d7edb6...a0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56b8d7edb6e8514baf119dddeb24ae77538877403d0a080835d569c3e243a7a0

  • Size

    56KB

  • Sample

    240515-153hesef9s

  • MD5

    0c8fce692678e5d357cc8cec80d906a3

  • SHA1

    617f7e38c69baebaa21accf6e076eab5664d9e10

  • SHA256

    56b8d7edb6e8514baf119dddeb24ae77538877403d0a080835d569c3e243a7a0

  • SHA512

    1da35ac0c39b73638bcdac44ab4cc84696c364f80577bd0362d599cfd957762011f203d6a1592c3ffb494ed6cf978335675269ec5f97cb16504bd6cac90421cc

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFufG7:67Zf/FAxTWY1++PJHJXA/OsIZh

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      56b8d7edb6e8514baf119dddeb24ae77538877403d0a080835d569c3e243a7a0

    • Size

      56KB

    • MD5

      0c8fce692678e5d357cc8cec80d906a3

    • SHA1

      617f7e38c69baebaa21accf6e076eab5664d9e10

    • SHA256

      56b8d7edb6e8514baf119dddeb24ae77538877403d0a080835d569c3e243a7a0

    • SHA512

      1da35ac0c39b73638bcdac44ab4cc84696c364f80577bd0362d599cfd957762011f203d6a1592c3ffb494ed6cf978335675269ec5f97cb16504bd6cac90421cc

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFufG7:67Zf/FAxTWY1++PJHJXA/OsIZh

    Score
    9/10
    ransomwareupx

    • Renames multiple (3610) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks