Overview

overview

10

Static

static

10

fd6de325a6...12.exe

windows7-x64

9

fd6de325a6...12.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd6de325a6cb4725cb642872c12848538c22f209841f76ead9222f6e490ec012

  • Size

    66KB

  • Sample

    240525-g29b1shb5z

  • MD5

    484a1ec667a50b308098a4e5cb29de56

  • SHA1

    e51f2d8c895622d984ba4ce311e0a696698257c9

  • SHA256

    fd6de325a6cb4725cb642872c12848538c22f209841f76ead9222f6e490ec012

  • SHA512

    a8d242ab20c1cccdffcb74b30977ede72c3d669d023d3dcd41e1d3f2dc7769c500b29ef50179a33034d2a37a52cee1834fbd66128402db44217b4951e8a45973

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q81osbosO:+nyiQSoaXO

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      fd6de325a6cb4725cb642872c12848538c22f209841f76ead9222f6e490ec012

    • Size

      66KB

    • MD5

      484a1ec667a50b308098a4e5cb29de56

    • SHA1

      e51f2d8c895622d984ba4ce311e0a696698257c9

    • SHA256

      fd6de325a6cb4725cb642872c12848538c22f209841f76ead9222f6e490ec012

    • SHA512

      a8d242ab20c1cccdffcb74b30977ede72c3d669d023d3dcd41e1d3f2dc7769c500b29ef50179a33034d2a37a52cee1834fbd66128402db44217b4951e8a45973

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q81osbosO:+nyiQSoaXO

    Score
    9/10
    ransomwareupx

    • Renames multiple (3458) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks