Overview

overview

10

Static

static

10

453423f008...59.exe

windows7-x64

9

453423f008...59.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    453423f00856b7bb0037fca5ec59554ff0e87936223161d78ef72d5d07592059

  • Size

    1.2MB

  • Sample

    240526-z1pkbscb5t

  • MD5

    6c5dc914873107c8cb9282c6624053a1

  • SHA1

    75978d2882828a167c49a350e0dbbc836e5498b1

  • SHA256

    453423f00856b7bb0037fca5ec59554ff0e87936223161d78ef72d5d07592059

  • SHA512

    582f955adfaae570974f0464fc73677fb5107507ff12b78323c27f22bcf53dc23f97e942887ac410e6f2ec52decacb2243ec8731d966c1a5befbdd55f11cac03

  • SSDEEP

    12288:KQtyZGtKgZGtK/CAIuZAIuezr6jU7RomhL5DNMuv1cmnIjvYf8mQCmlRvNm1A4bH:KItpzr0uRd7AnYszmn0E9UYy29H5+jb0

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      453423f00856b7bb0037fca5ec59554ff0e87936223161d78ef72d5d07592059

    • Size

      1.2MB

    • MD5

      6c5dc914873107c8cb9282c6624053a1

    • SHA1

      75978d2882828a167c49a350e0dbbc836e5498b1

    • SHA256

      453423f00856b7bb0037fca5ec59554ff0e87936223161d78ef72d5d07592059

    • SHA512

      582f955adfaae570974f0464fc73677fb5107507ff12b78323c27f22bcf53dc23f97e942887ac410e6f2ec52decacb2243ec8731d966c1a5befbdd55f11cac03

    • SSDEEP

      12288:KQtyZGtKgZGtK/CAIuZAIuezr6jU7RomhL5DNMuv1cmnIjvYf8mQCmlRvNm1A4bH:KItpzr0uRd7AnYszmn0E9UYy29H5+jb0

    Score
    9/10
    ransomwareupx

    • Renames multiple (819) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks