Overview

overview

10

Static

static

10

a506399e6a...45.exe

windows7-x64

9

a506399e6a...45.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645

  • Size

    42KB

  • Sample

    240612-cjdeeaydln

  • MD5

    733cc619acd14d432e5fd92436e1e8c3

  • SHA1

    e166eb659f914a8aba728a982a81c08109614ea8

  • SHA256

    a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645

  • SHA512

    2273f3d503eb50c6dc8ddca5becc11d7dc6e63eddc04d3501a334dd1af4a0aabf4ce57361dd98dbe9a773283b6dfeffbfeaca01898c483891c6f242081a81cd5

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFK:CTWn1++PJHJXA/OsIZfzc3/Q8K

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645

    • Size

      42KB

    • MD5

      733cc619acd14d432e5fd92436e1e8c3

    • SHA1

      e166eb659f914a8aba728a982a81c08109614ea8

    • SHA256

      a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645

    • SHA512

      2273f3d503eb50c6dc8ddca5becc11d7dc6e63eddc04d3501a334dd1af4a0aabf4ce57361dd98dbe9a773283b6dfeffbfeaca01898c483891c6f242081a81cd5

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFK:CTWn1++PJHJXA/OsIZfzc3/Q8K

    Score
    9/10
    ransomwareupx

    • Renames multiple (3782) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks