General

  • Target

    90e707d8f612f7765ad07a4e426b97a03df5528ef9198f3cf146550407abe503

  • Size

    259KB

  • Sample

    240611-ax4gmsxenp

  • MD5

    dd2a2f98748227136e80f8a904767c9d

  • SHA1

    f4f28abe10be68eb4c7b2b8e52974c44748440dc

  • SHA256

    90e707d8f612f7765ad07a4e426b97a03df5528ef9198f3cf146550407abe503

  • SHA512

    ca52ae9f5c3af469021e4c7888d39edee5c7a0d819d8f2963c907ea44d9edc4eb8bdeda400dd22572c9535c04e6b7ca9bb8cdac90f31a0dc01e0447fec008556

  • SSDEEP

    3072:fnymCAIuZAIuYSMjoqtMHfhflixizfAIuZAIuYSMjoqtMHfhflixi7:KmCAIuZAIuDMVtM/xfAIuZAIuDMVtM/N

Score
10/10

Malware Config

Targets

    • Target

      90e707d8f612f7765ad07a4e426b97a03df5528ef9198f3cf146550407abe503

    • Size

      259KB

    • MD5

      dd2a2f98748227136e80f8a904767c9d

    • SHA1

      f4f28abe10be68eb4c7b2b8e52974c44748440dc

    • SHA256

      90e707d8f612f7765ad07a4e426b97a03df5528ef9198f3cf146550407abe503

    • SHA512

      ca52ae9f5c3af469021e4c7888d39edee5c7a0d819d8f2963c907ea44d9edc4eb8bdeda400dd22572c9535c04e6b7ca9bb8cdac90f31a0dc01e0447fec008556

    • SSDEEP

      3072:fnymCAIuZAIuYSMjoqtMHfhflixizfAIuZAIuYSMjoqtMHfhflixi7:KmCAIuZAIuDMVtM/xfAIuZAIuDMVtM/N

    Score
    9/10
    • Renames multiple (2842) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks