Overview

overview

10

Static

static

10

e75351d352...2a.exe

windows7-x64

9

e75351d352...2a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e75351d3520e6543a58c1ed5de9b63e4e130b5b7a510d170629e33f27154cc2a

  • Size

    67KB

  • Sample

    240526-esyg2sfc34

  • MD5

    1bcd71607e40c1716da0e4bd02a85ada

  • SHA1

    d5c4a5e83896eea50c7b9fa752faa11c7409707a

  • SHA256

    e75351d3520e6543a58c1ed5de9b63e4e130b5b7a510d170629e33f27154cc2a

  • SHA512

    445b12a9a5663e0f67eeaf397bfe16565ab612cff6aa47386d8aa1ba29528bb046a777ebc6f385e01366c5978d2d6a016139621cdecfe8b22622cc5cd105508a

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8f:+nyiQSoY

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      e75351d3520e6543a58c1ed5de9b63e4e130b5b7a510d170629e33f27154cc2a

    • Size

      67KB

    • MD5

      1bcd71607e40c1716da0e4bd02a85ada

    • SHA1

      d5c4a5e83896eea50c7b9fa752faa11c7409707a

    • SHA256

      e75351d3520e6543a58c1ed5de9b63e4e130b5b7a510d170629e33f27154cc2a

    • SHA512

      445b12a9a5663e0f67eeaf397bfe16565ab612cff6aa47386d8aa1ba29528bb046a777ebc6f385e01366c5978d2d6a016139621cdecfe8b22622cc5cd105508a

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8f:+nyiQSoY

    Score
    9/10
    ransomwareupx

    • Renames multiple (3444) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks