Overview

overview

10

Static

static

10

1b3d794620...d5.exe

windows7-x64

9

1b3d794620...d5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b3d7946207b04ca8f8c76de1192b0d2de3d2fa9f191461759e8464ee60f70d5

  • Size

    70KB

  • Sample

    240525-xv9bfaeh5t

  • MD5

    5acd933a85196f99826b53cd78574468

  • SHA1

    fd01fd8940dfcc3847cc441ef7089adc3a16cd33

  • SHA256

    1b3d7946207b04ca8f8c76de1192b0d2de3d2fa9f191461759e8464ee60f70d5

  • SHA512

    147779d10b6d8b76a774615ac73d08e0839bd5b0efec4bd6b2a4b7dbacd9d9f9a760b82c6df3ac356e9a4688289c747d68cd8828896f8baf1b0054f36a7aa165

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXUP:67Zf/FAxTWY1++PJHJXA/OsIZpPEIUT

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      1b3d7946207b04ca8f8c76de1192b0d2de3d2fa9f191461759e8464ee60f70d5

    • Size

      70KB

    • MD5

      5acd933a85196f99826b53cd78574468

    • SHA1

      fd01fd8940dfcc3847cc441ef7089adc3a16cd33

    • SHA256

      1b3d7946207b04ca8f8c76de1192b0d2de3d2fa9f191461759e8464ee60f70d5

    • SHA512

      147779d10b6d8b76a774615ac73d08e0839bd5b0efec4bd6b2a4b7dbacd9d9f9a760b82c6df3ac356e9a4688289c747d68cd8828896f8baf1b0054f36a7aa165

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXUP:67Zf/FAxTWY1++PJHJXA/OsIZpPEIUT

    Score
    9/10
    ransomwareupx

    • Renames multiple (928) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks