Overview

overview

9

Static

static

1

2024-05-21...if.exe

windows7-x64

9

2024-05-21...if.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_31637c49f3a396195dec492ba5a33dad_bkransomware_floxif

  • Size

    1.9MB

  • Sample

    240521-aqawracb83

  • MD5

    31637c49f3a396195dec492ba5a33dad

  • SHA1

    1562d9d79f4e601e2e3bf82e2d21bc4567099ccb

  • SHA256

    15272446b2cddf026ff77a0fd5c3baed620812922fc486135806444274e538f4

  • SHA512

    cc71ad42936a9c141e4461ac1bef51b28dabdfdcdf4b49f07aaf2c9d20d28baae65adacf1a5cd7328bd5a2e348d6a133a3a74254be9d01e0428de84fa5dad33e

  • SSDEEP

    49152:JoxpzXgcE5INRdPHxjg5vvneTiu0LArHNAC3GJUGDnlTcmICdtY:JGQcE5INR9xGnneTiu0L+AC3GJUGDnlg

Score
9/10
upx

Malware Config

Targets

    • Target

      2024-05-21_31637c49f3a396195dec492ba5a33dad_bkransomware_floxif

    • Size

      1.9MB

    • MD5

      31637c49f3a396195dec492ba5a33dad

    • SHA1

      1562d9d79f4e601e2e3bf82e2d21bc4567099ccb

    • SHA256

      15272446b2cddf026ff77a0fd5c3baed620812922fc486135806444274e538f4

    • SHA512

      cc71ad42936a9c141e4461ac1bef51b28dabdfdcdf4b49f07aaf2c9d20d28baae65adacf1a5cd7328bd5a2e348d6a133a3a74254be9d01e0428de84fa5dad33e

    • SSDEEP

      49152:JoxpzXgcE5INRdPHxjg5vvneTiu0LArHNAC3GJUGDnlTcmICdtY:JGQcE5INR9xGnneTiu0L+AC3GJUGDnlg

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks