Overview

overview

10

Static

static

10

8d6615f905...f3.exe

windows7-x64

9

8d6615f905...f3.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d6615f905e9e105a6d7fed9bb682352d21aeb005879855997ea22ddb468f8f3

  • Size

    100KB

  • Sample

    240525-aysrjagd5y

  • MD5

    7b93b040d8539f6a541ca742d8670d8f

  • SHA1

    b3e2719d91c7637c554e1b6d9dbceab8645cc200

  • SHA256

    8d6615f905e9e105a6d7fed9bb682352d21aeb005879855997ea22ddb468f8f3

  • SHA512

    d650a3c32e28413737fa1c89d530e9b78094469fda3a98d9eb1f7a8d98b0b92a8903d44b4c2e191c48f242f21a166076dc3709886cd237394f961b637fe8cad4

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfL:hfAIuZAIuYSMjoqtMHfhfL

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      8d6615f905e9e105a6d7fed9bb682352d21aeb005879855997ea22ddb468f8f3

    • Size

      100KB

    • MD5

      7b93b040d8539f6a541ca742d8670d8f

    • SHA1

      b3e2719d91c7637c554e1b6d9dbceab8645cc200

    • SHA256

      8d6615f905e9e105a6d7fed9bb682352d21aeb005879855997ea22ddb468f8f3

    • SHA512

      d650a3c32e28413737fa1c89d530e9b78094469fda3a98d9eb1f7a8d98b0b92a8903d44b4c2e191c48f242f21a166076dc3709886cd237394f961b637fe8cad4

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfL:hfAIuZAIuYSMjoqtMHfhfL

    Score
    9/10
    ransomwareupx

    • Renames multiple (3523) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks