Overview

overview

10

Static

static

10

450db42ec3...44.exe

windows7-x64

9

450db42ec3...44.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    450db42ec387724b3979f81561727dff5b68ef9c9cfd0a50e38197474c1e2944

  • Size

    149KB

  • Sample

    240524-zynj9abc96

  • MD5

    0e2235b576253d56dab6bb43ac954e31

  • SHA1

    ac44c5b3c65a9fdbb9aaec3f653401278818d1a5

  • SHA256

    450db42ec387724b3979f81561727dff5b68ef9c9cfd0a50e38197474c1e2944

  • SHA512

    a57b0241a3db39024021c7ae8cf82d857aa5a0ddce95a98057aec2935a36a815a13e6db193357ac750081a529e69a174be77003dbb286f1254fc779a1b7da865

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8s316u0MXo7Rwcz6G7wb/G0CIvXZ9yhHe:+nyiQSobuBhe6MiIqWLsUu3ih

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      450db42ec387724b3979f81561727dff5b68ef9c9cfd0a50e38197474c1e2944

    • Size

      149KB

    • MD5

      0e2235b576253d56dab6bb43ac954e31

    • SHA1

      ac44c5b3c65a9fdbb9aaec3f653401278818d1a5

    • SHA256

      450db42ec387724b3979f81561727dff5b68ef9c9cfd0a50e38197474c1e2944

    • SHA512

      a57b0241a3db39024021c7ae8cf82d857aa5a0ddce95a98057aec2935a36a815a13e6db193357ac750081a529e69a174be77003dbb286f1254fc779a1b7da865

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8s316u0MXo7Rwcz6G7wb/G0CIvXZ9yhHe:+nyiQSobuBhe6MiIqWLsUu3ih

    Score
    9/10
    ransomwareupx

    • Renames multiple (3285) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks