Overview

overview

10

Static

static

10

7f7d8cf877...72.exe

windows7-x64

9

7f7d8cf877...72.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f7d8cf877acf1f0a7e0e039d9e33582da78c52475328c6ac0fd9e5b9b2c3c72

  • Size

    68KB

  • Sample

    240528-25mmmsgc2x

  • MD5

    848adbe65a2d6654b1c7d10f60bbecc9

  • SHA1

    8bf571aa7adcc48401b72d0c0e190bf04350ca95

  • SHA256

    7f7d8cf877acf1f0a7e0e039d9e33582da78c52475328c6ac0fd9e5b9b2c3c72

  • SHA512

    3dc5dad634fe540e33aac2ffdc9597c7f96772bc512604085e7583af11e516792d04518a704486443a45f0658480a520778d343db0684881a64e97b9c522e644

  • SSDEEP

    768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXwha:a7ZyqaFAlsr1++PJHJXFAIuZAIuzha

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      7f7d8cf877acf1f0a7e0e039d9e33582da78c52475328c6ac0fd9e5b9b2c3c72

    • Size

      68KB

    • MD5

      848adbe65a2d6654b1c7d10f60bbecc9

    • SHA1

      8bf571aa7adcc48401b72d0c0e190bf04350ca95

    • SHA256

      7f7d8cf877acf1f0a7e0e039d9e33582da78c52475328c6ac0fd9e5b9b2c3c72

    • SHA512

      3dc5dad634fe540e33aac2ffdc9597c7f96772bc512604085e7583af11e516792d04518a704486443a45f0658480a520778d343db0684881a64e97b9c522e644

    • SSDEEP

      768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXwha:a7ZyqaFAlsr1++PJHJXFAIuZAIuzha

    Score
    9/10
    ransomwareupx

    • Renames multiple (3695) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks