Overview

overview

10

Static

static

10

4f87330dfe...02.exe

windows7-x64

9

4f87330dfe...02.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f87330dfecbed2005fbda7eaa125bc24053f3d94adac25b34158c5c37ed4a02

  • Size

    44KB

  • Sample

    240524-1g27racb79

  • MD5

    1a554900f362fc60c798d9692497c433

  • SHA1

    2cd88a2d6d22ae2c0887f1c30d4a1ddd42d55dcc

  • SHA256

    4f87330dfecbed2005fbda7eaa125bc24053f3d94adac25b34158c5c37ed4a02

  • SHA512

    b9a01d4ba8b82f1b36841d16ce4472ffbfc751ab8ecbf0f869c5e47b3603167c50b40396685a62d20c539691faa06cb671f129763e947f21f69c615dff3d321b

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFvP:CTWn1++PJHJXA/OsIZfzc3/Q8vzb

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      4f87330dfecbed2005fbda7eaa125bc24053f3d94adac25b34158c5c37ed4a02

    • Size

      44KB

    • MD5

      1a554900f362fc60c798d9692497c433

    • SHA1

      2cd88a2d6d22ae2c0887f1c30d4a1ddd42d55dcc

    • SHA256

      4f87330dfecbed2005fbda7eaa125bc24053f3d94adac25b34158c5c37ed4a02

    • SHA512

      b9a01d4ba8b82f1b36841d16ce4472ffbfc751ab8ecbf0f869c5e47b3603167c50b40396685a62d20c539691faa06cb671f129763e947f21f69c615dff3d321b

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFvP:CTWn1++PJHJXA/OsIZfzc3/Q8vzb

    Score
    9/10
    ransomwareupx

    • Renames multiple (3784) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks