Overview

overview

10

Static

static

10

691a0a5b5d...9e.exe

windows7-x64

9

691a0a5b5d...9e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    691a0a5b5dc9446e306b70eee837ac132734a964dccc6fb0ae196528d9b63c9e

  • Size

    124KB

  • Sample

    240525-2lpmwsdg27

  • MD5

    32b4b4543f9707eeea3a30cfb6a6b6d1

  • SHA1

    d67ebe9c9a0979c9346a9e23ca8e0d9bb212d927

  • SHA256

    691a0a5b5dc9446e306b70eee837ac132734a964dccc6fb0ae196528d9b63c9e

  • SHA512

    1be2d2bf2133f8d6e97e130e4d959e45a9ffeb44d581570e62f07def60858e49c8ca308720b637ef3f9587aa267fe688bbde712534d17964be3a9448c0831901

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCz:+nymCAIuZAIuYSMjoqtMHfhfC

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      691a0a5b5dc9446e306b70eee837ac132734a964dccc6fb0ae196528d9b63c9e

    • Size

      124KB

    • MD5

      32b4b4543f9707eeea3a30cfb6a6b6d1

    • SHA1

      d67ebe9c9a0979c9346a9e23ca8e0d9bb212d927

    • SHA256

      691a0a5b5dc9446e306b70eee837ac132734a964dccc6fb0ae196528d9b63c9e

    • SHA512

      1be2d2bf2133f8d6e97e130e4d959e45a9ffeb44d581570e62f07def60858e49c8ca308720b637ef3f9587aa267fe688bbde712534d17964be3a9448c0831901

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCz:+nymCAIuZAIuYSMjoqtMHfhfC

    Score
    9/10
    ransomwareupx

    • Renames multiple (3430) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks