Overview

overview

10

Static

static

10

7d26e9fd83...78.exe

windows7-x64

9

7d26e9fd83...78.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d26e9fd8311eba2558511689a79365e8404ec0f43a8daf385d40629cd599b78

  • Size

    79KB

  • Sample

    240603-aae6jabh5t

  • MD5

    7e5c6041ba0d28db2bf22f93bafab86f

  • SHA1

    1987640473eb70f75e84cf6cab7d1997dac5b363

  • SHA256

    7d26e9fd8311eba2558511689a79365e8404ec0f43a8daf385d40629cd599b78

  • SHA512

    a8a6f06b81c5ecaac15abacbb80ad55bee5b268bd9762d84926ab9c464775297f454068d52907326e5c445c9e06447518965eec7a68a490c644947560392094a

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUshQ:fnyiQSohsUshQ

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      7d26e9fd8311eba2558511689a79365e8404ec0f43a8daf385d40629cd599b78

    • Size

      79KB

    • MD5

      7e5c6041ba0d28db2bf22f93bafab86f

    • SHA1

      1987640473eb70f75e84cf6cab7d1997dac5b363

    • SHA256

      7d26e9fd8311eba2558511689a79365e8404ec0f43a8daf385d40629cd599b78

    • SHA512

      a8a6f06b81c5ecaac15abacbb80ad55bee5b268bd9762d84926ab9c464775297f454068d52907326e5c445c9e06447518965eec7a68a490c644947560392094a

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUshQ:fnyiQSohsUshQ

    Score
    9/10
    ransomwareupx

    • Renames multiple (3547) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks