Overview

overview

10

Static

static

10

2755dcb4ff...48.exe

windows7-x64

9

2755dcb4ff...48.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2755dcb4ffffcd76ef72e88a1b4fed71bf72458247be41b6bb6e794babe7f148

  • Size

    275KB

  • Sample

    240613-znd8tszdja

  • MD5

    b16bd2f3bfa52e4914d409204c585208

  • SHA1

    28d5cdc3f8f7806c48d9b53dbcc391c6ab685b8d

  • SHA256

    2755dcb4ffffcd76ef72e88a1b4fed71bf72458247be41b6bb6e794babe7f148

  • SHA512

    aeb1eed38d55c930fd4e9d9d58a30a843137ae486acf0a5ba63a2761d3bfd831e4e3c09922add63e383718c136acede576fafb4df66db1b6fc072c8ce0d894dd

  • SSDEEP

    6144:wHm3AIuZAIuDMVtM/iHm3AIuZAIuDMVtM/b:XAIuZAIuOoAIuZAIuOI

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      2755dcb4ffffcd76ef72e88a1b4fed71bf72458247be41b6bb6e794babe7f148

    • Size

      275KB

    • MD5

      b16bd2f3bfa52e4914d409204c585208

    • SHA1

      28d5cdc3f8f7806c48d9b53dbcc391c6ab685b8d

    • SHA256

      2755dcb4ffffcd76ef72e88a1b4fed71bf72458247be41b6bb6e794babe7f148

    • SHA512

      aeb1eed38d55c930fd4e9d9d58a30a843137ae486acf0a5ba63a2761d3bfd831e4e3c09922add63e383718c136acede576fafb4df66db1b6fc072c8ce0d894dd

    • SSDEEP

      6144:wHm3AIuZAIuDMVtM/iHm3AIuZAIuDMVtM/b:XAIuZAIuOoAIuZAIuOI

    Score
    9/10
    ransomwareupx

    • Renames multiple (3611) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks