Overview

overview

10

Static

static

10

9ce52f2f72...db.exe

windows7-x64

9

9ce52f2f72...db.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ce52f2f72507f4e3776c1346ef2150cb743874795ed56d94ac3cd39473664db

  • Size

    43KB

  • Sample

    240525-bpkv1ahe2v

  • MD5

    2cbc215a225a0aa2bb28c59e97245d21

  • SHA1

    bec683ce978c57f38ed4430bcff9a1fd84066642

  • SHA256

    9ce52f2f72507f4e3776c1346ef2150cb743874795ed56d94ac3cd39473664db

  • SHA512

    646ae3d6012eb54ec4c0dbccad8abb4ce96a6519c4abf3b762be6a5cb570024567a53b81ca54609b1c5711b65aedcde1a083df6554af2e213e47977512c6f369

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzg:CTWn1++PJHJXA/OsIZfzc3/Q8z2xlxr

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      9ce52f2f72507f4e3776c1346ef2150cb743874795ed56d94ac3cd39473664db

    • Size

      43KB

    • MD5

      2cbc215a225a0aa2bb28c59e97245d21

    • SHA1

      bec683ce978c57f38ed4430bcff9a1fd84066642

    • SHA256

      9ce52f2f72507f4e3776c1346ef2150cb743874795ed56d94ac3cd39473664db

    • SHA512

      646ae3d6012eb54ec4c0dbccad8abb4ce96a6519c4abf3b762be6a5cb570024567a53b81ca54609b1c5711b65aedcde1a083df6554af2e213e47977512c6f369

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzg:CTWn1++PJHJXA/OsIZfzc3/Q8z2xlxr

    Score
    9/10
    ransomwareupx

    • Renames multiple (4066) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks