Overview

overview

10

Static

static

10

bb40860385...19.exe

windows7-x64

9

bb40860385...19.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb408603851f60a4d57a875c744bc893292110fb7d5a0910d18d394731772f19

  • Size

    108KB

  • Sample

    240515-ct4z4scg4x

  • MD5

    49062f54a9e9f1082bada581b7117d45

  • SHA1

    378095d0f263a0a9ebef2e90be6d7b1a58fba124

  • SHA256

    bb408603851f60a4d57a875c744bc893292110fb7d5a0910d18d394731772f19

  • SHA512

    08cc4c0e604e579f572e46a4f3a297ca8e720e27d1bcd73f0fd945af3f546d96a764eec2b72240f927adcfa1b47bd69fb5da3494942f5c499bb53ff7e93a13d5

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf0xG:hfAIuZAIuYSMjoqtMHfhfz

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      bb408603851f60a4d57a875c744bc893292110fb7d5a0910d18d394731772f19

    • Size

      108KB

    • MD5

      49062f54a9e9f1082bada581b7117d45

    • SHA1

      378095d0f263a0a9ebef2e90be6d7b1a58fba124

    • SHA256

      bb408603851f60a4d57a875c744bc893292110fb7d5a0910d18d394731772f19

    • SHA512

      08cc4c0e604e579f572e46a4f3a297ca8e720e27d1bcd73f0fd945af3f546d96a764eec2b72240f927adcfa1b47bd69fb5da3494942f5c499bb53ff7e93a13d5

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf0xG:hfAIuZAIuYSMjoqtMHfhfz

    Score
    9/10
    ransomwareupx

    • Renames multiple (3494) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks