Overview

overview

10

Static

static

10

0e7a3459bc...f0.exe

windows7-x64

9

0e7a3459bc...f0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e7a3459bc7961a220ccac686d74c5e88eaad8b096ff5a37bd875a605fa9f8f0

  • Size

    68KB

  • Sample

    240524-xd9wmsfd96

  • MD5

    0ea51e3789191515aa2401571376bd5c

  • SHA1

    df1db6ed47a49f7d59f59a5296003dc9399373ba

  • SHA256

    0e7a3459bc7961a220ccac686d74c5e88eaad8b096ff5a37bd875a605fa9f8f0

  • SHA512

    bdd1370dddfdf27374c8f9cabe756d51a7d2bb7fdd8554a1e257a42055d72a71bf72a61be746527d21539880798991d667c6918bb3b59f3059c28ad09d0aba27

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8p:fnyiQSoC

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      0e7a3459bc7961a220ccac686d74c5e88eaad8b096ff5a37bd875a605fa9f8f0

    • Size

      68KB

    • MD5

      0ea51e3789191515aa2401571376bd5c

    • SHA1

      df1db6ed47a49f7d59f59a5296003dc9399373ba

    • SHA256

      0e7a3459bc7961a220ccac686d74c5e88eaad8b096ff5a37bd875a605fa9f8f0

    • SHA512

      bdd1370dddfdf27374c8f9cabe756d51a7d2bb7fdd8554a1e257a42055d72a71bf72a61be746527d21539880798991d667c6918bb3b59f3059c28ad09d0aba27

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8p:fnyiQSoC

    Score
    9/10
    ransomwareupx

    • Renames multiple (3688) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks