Overview

overview

10

Static

static

10

19d872cafe...af.exe

windows7-x64

9

19d872cafe...af.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19d872cafec60d3c3cf512b6879dd4c351d06a4c04b7f535c31ad911fceb0faf

  • Size

    51KB

  • Sample

    240616-xsna7axcjm

  • MD5

    4c7fa30f96af5161686b8065d7dc8028

  • SHA1

    b821118e3c106aef2d48d0044d1dcc491ada8475

  • SHA256

    19d872cafec60d3c3cf512b6879dd4c351d06a4c04b7f535c31ad911fceb0faf

  • SHA512

    e57c9a6d484cdd1fc159bf585d50939a0d70e3994ea4a2c6a6acd2ef1965a24a900fac5162cf091fe6c5b33bc2d7b016124aa1c5c6cf7f8391af6fe088765e64

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzS:CTWn1++PJHJXA/OsIZfzc3/Q8zxUkI

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      19d872cafec60d3c3cf512b6879dd4c351d06a4c04b7f535c31ad911fceb0faf

    • Size

      51KB

    • MD5

      4c7fa30f96af5161686b8065d7dc8028

    • SHA1

      b821118e3c106aef2d48d0044d1dcc491ada8475

    • SHA256

      19d872cafec60d3c3cf512b6879dd4c351d06a4c04b7f535c31ad911fceb0faf

    • SHA512

      e57c9a6d484cdd1fc159bf585d50939a0d70e3994ea4a2c6a6acd2ef1965a24a900fac5162cf091fe6c5b33bc2d7b016124aa1c5c6cf7f8391af6fe088765e64

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzS:CTWn1++PJHJXA/OsIZfzc3/Q8zxUkI

    Score
    9/10
    ransomwareupx

    • Renames multiple (3524) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks