Overview

overview

10

Static

static

10

ce69a0bcdf...63.exe

windows7-x64

9

ce69a0bcdf...63.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce69a0bcdf5bbdf2a8384c2febddd5db5c93ced14428a783a2fbf775caf0a863

  • Size

    121KB

  • Sample

    240525-edc8kadf52

  • MD5

    24f73f6d539f7aa0708d3ed780d533f1

  • SHA1

    2157d892f5b1545fb94a5573369fc4389b148cd5

  • SHA256

    ce69a0bcdf5bbdf2a8384c2febddd5db5c93ced14428a783a2fbf775caf0a863

  • SHA512

    4a105b25ccb905e68f853fba9b03ff2f1c006464637ebd65d7112d886c7b334b847b7a4ff0dff20793dc3e3e71d043eddbe47ecabb8eced627d5cf7e56a18545

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCS:+nymCAIuZAIuYSMjoqtMHfhf3

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      ce69a0bcdf5bbdf2a8384c2febddd5db5c93ced14428a783a2fbf775caf0a863

    • Size

      121KB

    • MD5

      24f73f6d539f7aa0708d3ed780d533f1

    • SHA1

      2157d892f5b1545fb94a5573369fc4389b148cd5

    • SHA256

      ce69a0bcdf5bbdf2a8384c2febddd5db5c93ced14428a783a2fbf775caf0a863

    • SHA512

      4a105b25ccb905e68f853fba9b03ff2f1c006464637ebd65d7112d886c7b334b847b7a4ff0dff20793dc3e3e71d043eddbe47ecabb8eced627d5cf7e56a18545

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCS:+nymCAIuZAIuYSMjoqtMHfhf3

    Score
    9/10
    ransomwareupx

    • Renames multiple (554) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks