Overview

overview

10

Static

static

10

8c8286392b...f8.exe

windows7-x64

9

8c8286392b...f8.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c8286392b4e3bcab0354075fe21b351d7dfa17d60028cfc7ff4151c1af760f8

  • Size

    233KB

  • Sample

    240607-dqvspshh42

  • MD5

    afd5cd75d2b43ae033d2bda5c283cee4

  • SHA1

    d31b2fbcee53e70a6943dc41e347fdae88c68262

  • SHA256

    8c8286392b4e3bcab0354075fe21b351d7dfa17d60028cfc7ff4151c1af760f8

  • SHA512

    819a3b3fce7821ad02f32a23f8f3274ee41bdc1bb3caa646da8a6aa66dbccc04def8239122f79621e213daf343ca2d706368e2d480c12bc5e077c0edac84b2f3

  • SSDEEP

    3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuYch93g+gfFpsJOfFpsJ6:JiQSo1EZGtKgZGtK/CAIuZAIuH3m

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      8c8286392b4e3bcab0354075fe21b351d7dfa17d60028cfc7ff4151c1af760f8

    • Size

      233KB

    • MD5

      afd5cd75d2b43ae033d2bda5c283cee4

    • SHA1

      d31b2fbcee53e70a6943dc41e347fdae88c68262

    • SHA256

      8c8286392b4e3bcab0354075fe21b351d7dfa17d60028cfc7ff4151c1af760f8

    • SHA512

      819a3b3fce7821ad02f32a23f8f3274ee41bdc1bb3caa646da8a6aa66dbccc04def8239122f79621e213daf343ca2d706368e2d480c12bc5e077c0edac84b2f3

    • SSDEEP

      3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuYch93g+gfFpsJOfFpsJ6:JiQSo1EZGtKgZGtK/CAIuZAIuH3m

    Score
    9/10
    ransomwareupx

    • Renames multiple (199) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks