Overview

overview

10

Static

static

10

6ccdbc3570...52.exe

windows7-x64

9

6ccdbc3570...52.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ccdbc35706b31557bc6fc5b129c45400bb6e52dc8b2bc36059687fe47857452

  • Size

    47KB

  • Sample

    240525-2t2bnaeb56

  • MD5

    42f23960db54bd87dbc8c6c0f0f0b9ea

  • SHA1

    cec752f1ac3371f5e8a3b9608f0e22a766131efa

  • SHA256

    6ccdbc35706b31557bc6fc5b129c45400bb6e52dc8b2bc36059687fe47857452

  • SHA512

    cdc1ecce363c6bd0224e7a0fd7c1bc36c8080c5097f66e73c7a5b6f023677285603994396c02607f3b01d4fc1b793099b72cbce08dab3e172e7b4408342fc72d

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzV:CTWn1++PJHJXA/OsIZfzc3/Q8zxD

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      6ccdbc35706b31557bc6fc5b129c45400bb6e52dc8b2bc36059687fe47857452

    • Size

      47KB

    • MD5

      42f23960db54bd87dbc8c6c0f0f0b9ea

    • SHA1

      cec752f1ac3371f5e8a3b9608f0e22a766131efa

    • SHA256

      6ccdbc35706b31557bc6fc5b129c45400bb6e52dc8b2bc36059687fe47857452

    • SHA512

      cdc1ecce363c6bd0224e7a0fd7c1bc36c8080c5097f66e73c7a5b6f023677285603994396c02607f3b01d4fc1b793099b72cbce08dab3e172e7b4408342fc72d

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzV:CTWn1++PJHJXA/OsIZfzc3/Q8zxD

    Score
    9/10
    ransomwareupx

    • Renames multiple (3728) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks