Overview

overview

10

Static

static

10

099262b36c...e1.exe

windows7-x64

9

099262b36c...e1.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1

  • Size

    45KB

  • Sample

    240522-w3jkbaca54

  • MD5

    f98a261cfca6f109066daa5626a39a0e

  • SHA1

    337a63bd15ecf686a8f20d38ec741c5c12f1def0

  • SHA256

    099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1

  • SHA512

    9fff428a38708224c4e92a8cb9abe21f449353cfabeecf0294dc69d35c75b92dbae9b9bc08c4a7206a1c990e40e2272cb37eeb35eebfd2647b531c5e89235492

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8PxF

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1

    • Size

      45KB

    • MD5

      f98a261cfca6f109066daa5626a39a0e

    • SHA1

      337a63bd15ecf686a8f20d38ec741c5c12f1def0

    • SHA256

      099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1

    • SHA512

      9fff428a38708224c4e92a8cb9abe21f449353cfabeecf0294dc69d35c75b92dbae9b9bc08c4a7206a1c990e40e2272cb37eeb35eebfd2647b531c5e89235492

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8PxF

    Score
    9/10
    ransomwareupx

    • Renames multiple (3755) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks