Overview

overview

10

Static

static

10

4bd6c6c252...55.exe

windows7-x64

9

4bd6c6c252...55.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bd6c6c252d2358f46f1a54af4b56cf943ba0690546c2c68a7a35b68de514555

  • Size

    64KB

  • Sample

    240524-1ata9sbg97

  • MD5

    90a2a7b57235e700ba43c66a385abd6b

  • SHA1

    b67759e4dec5af1f42aa3a548948a759f71b3833

  • SHA256

    4bd6c6c252d2358f46f1a54af4b56cf943ba0690546c2c68a7a35b68de514555

  • SHA512

    418a022a8819e0c9ceaa1bd339c325175953c6e05dbb48ef02bd45f89393e9c08362cd3c5d48ffc75af75034007baadd1a33aba057c632639e6ffb6148aa334f

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFufGWQML:67Zf/FAxTWY1++PJHJXA/OsIZI

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      4bd6c6c252d2358f46f1a54af4b56cf943ba0690546c2c68a7a35b68de514555

    • Size

      64KB

    • MD5

      90a2a7b57235e700ba43c66a385abd6b

    • SHA1

      b67759e4dec5af1f42aa3a548948a759f71b3833

    • SHA256

      4bd6c6c252d2358f46f1a54af4b56cf943ba0690546c2c68a7a35b68de514555

    • SHA512

      418a022a8819e0c9ceaa1bd339c325175953c6e05dbb48ef02bd45f89393e9c08362cd3c5d48ffc75af75034007baadd1a33aba057c632639e6ffb6148aa334f

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFufGWQML:67Zf/FAxTWY1++PJHJXA/OsIZI

    Score
    9/10
    ransomwareupx

    • Renames multiple (3607) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks