Overview

overview

10

Static

static

10

7dfb560940...b5.exe

windows7-x64

9

7dfb560940...b5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7dfb560940ecdebeba13034105109deffff8d09fd601d71812ec3ac4d01987b5

  • Size

    74KB

  • Sample

    240524-3q44tafc7t

  • MD5

    36b3c238e42a23880057dce3935bc9d9

  • SHA1

    ae4f2a135510dffd89f0b5e87625eaff7dddbc82

  • SHA256

    7dfb560940ecdebeba13034105109deffff8d09fd601d71812ec3ac4d01987b5

  • SHA512

    c53905bdd3fc7a7e94952e2b94585651a8dc8c7d1c974f3b33a35a0ddc6eb440163507bb489fec04d935364323c8bdb6b2cf904760d56a9852716e763242edf8

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJ2:fnyiQSo0

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      7dfb560940ecdebeba13034105109deffff8d09fd601d71812ec3ac4d01987b5

    • Size

      74KB

    • MD5

      36b3c238e42a23880057dce3935bc9d9

    • SHA1

      ae4f2a135510dffd89f0b5e87625eaff7dddbc82

    • SHA256

      7dfb560940ecdebeba13034105109deffff8d09fd601d71812ec3ac4d01987b5

    • SHA512

      c53905bdd3fc7a7e94952e2b94585651a8dc8c7d1c974f3b33a35a0ddc6eb440163507bb489fec04d935364323c8bdb6b2cf904760d56a9852716e763242edf8

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJ2:fnyiQSo0

    Score
    9/10
    ransomwareupx

    • Renames multiple (3708) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks