Overview

overview

10

Static

static

10

7f1ae94c6d...23.exe

windows7-x64

9

7f1ae94c6d...23.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f1ae94c6d683aa2ae1fdac5406268eec2869afb2b4e8d1eeab171f57548fc23

  • Size

    66KB

  • Sample

    240603-3g3jmadh63

  • MD5

    7b3710b67ecbfd375be6c7557532d88c

  • SHA1

    55e7305cf224bb51906b37b154f5dd690a0eabf9

  • SHA256

    7f1ae94c6d683aa2ae1fdac5406268eec2869afb2b4e8d1eeab171f57548fc23

  • SHA512

    ba12a972ba5e73967042a09fa4f3637a1826d6dbb6083fa7f195db0ee2dd024b86e9d31e7e7e565b582454df50c8e7ed9215e478f9ca7e0361b3af28c6a467ac

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZBX5WX5jsaLsab:+nyi4MZsgsS

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      7f1ae94c6d683aa2ae1fdac5406268eec2869afb2b4e8d1eeab171f57548fc23

    • Size

      66KB

    • MD5

      7b3710b67ecbfd375be6c7557532d88c

    • SHA1

      55e7305cf224bb51906b37b154f5dd690a0eabf9

    • SHA256

      7f1ae94c6d683aa2ae1fdac5406268eec2869afb2b4e8d1eeab171f57548fc23

    • SHA512

      ba12a972ba5e73967042a09fa4f3637a1826d6dbb6083fa7f195db0ee2dd024b86e9d31e7e7e565b582454df50c8e7ed9215e478f9ca7e0361b3af28c6a467ac

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZBX5WX5jsaLsab:+nyi4MZsgsS

    Score
    9/10
    ransomwareupx

    • Renames multiple (794) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks