Overview

overview

10

Static

static

10

f5cd8f594b...c5.exe

windows7-x64

9

f5cd8f594b...c5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5cd8f594b9f956c10a581ce0cb04fb4b8f4cffd823b3ba64727654d74840dc5

  • Size

    70KB

  • Sample

    240526-fg6vqaff2t

  • MD5

    2ef68ec6125b156c6fdc86e24972e94d

  • SHA1

    5991b136d1c59cfd9c543907f82df4d6c9d13754

  • SHA256

    f5cd8f594b9f956c10a581ce0cb04fb4b8f4cffd823b3ba64727654d74840dc5

  • SHA512

    2303e7c27ca90cb2ef2421cbccbbc674be8586e84a92ef42bd65e8f89d99c5a85d21701fae541298b41d4b4dd885ac5a3be6f166ef4ec668eb04dafeb7f93a8c

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXUS:67Zf/FAxTWY1++PJHJXA/OsIZpPEIU2

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      f5cd8f594b9f956c10a581ce0cb04fb4b8f4cffd823b3ba64727654d74840dc5

    • Size

      70KB

    • MD5

      2ef68ec6125b156c6fdc86e24972e94d

    • SHA1

      5991b136d1c59cfd9c543907f82df4d6c9d13754

    • SHA256

      f5cd8f594b9f956c10a581ce0cb04fb4b8f4cffd823b3ba64727654d74840dc5

    • SHA512

      2303e7c27ca90cb2ef2421cbccbbc674be8586e84a92ef42bd65e8f89d99c5a85d21701fae541298b41d4b4dd885ac5a3be6f166ef4ec668eb04dafeb7f93a8c

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXUS:67Zf/FAxTWY1++PJHJXA/OsIZpPEIU2

    Score
    9/10
    ransomwareupx

    • Renames multiple (3731) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks