Overview

overview

10

Static

static

10

29dee12c46...3d.exe

windows7-x64

9

29dee12c46...3d.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    29dee12c4642eb67aae8ec42d97dcbdf873803136f85d4474ae60213f3c94f3d

  • Size

    103KB

  • Sample

    240520-zaj7xsge5z

  • MD5

    041b6a5f58f4216aa702da36f1bb18ba

  • SHA1

    44d1738ea2aaa8aaf0aa8125feea0e3238d303a2

  • SHA256

    29dee12c4642eb67aae8ec42d97dcbdf873803136f85d4474ae60213f3c94f3d

  • SHA512

    45f26f15e11da9979df82fb0ccb5724289d95cd77cc6f1487e1457062f68aac64f917c556f3eb2e264c2fe21a9aea86d9668a03abe7c4816c98acae1cedb4c84

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf0xz:hfAIuZAIuYSMjoqtMHfhfW

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      29dee12c4642eb67aae8ec42d97dcbdf873803136f85d4474ae60213f3c94f3d

    • Size

      103KB

    • MD5

      041b6a5f58f4216aa702da36f1bb18ba

    • SHA1

      44d1738ea2aaa8aaf0aa8125feea0e3238d303a2

    • SHA256

      29dee12c4642eb67aae8ec42d97dcbdf873803136f85d4474ae60213f3c94f3d

    • SHA512

      45f26f15e11da9979df82fb0ccb5724289d95cd77cc6f1487e1457062f68aac64f917c556f3eb2e264c2fe21a9aea86d9668a03abe7c4816c98acae1cedb4c84

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf0xz:hfAIuZAIuYSMjoqtMHfhfW

    Score
    9/10
    ransomwareupx

    • Renames multiple (3442) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks