Overview

overview

9

Static

static

7

75694e9fe5...75.exe

windows7-x64

9

75694e9fe5...75.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    75694e9fe51dcc16a24f106d54c13a8ab49d936e5d294ad18ccc541c470f5e75

  • Size

    143KB

  • Sample

    240627-2z72dswhkg

  • MD5

    f18424b131dd684257fe949b80b9505c

  • SHA1

    028f6393e6614c930542b41d6f2c4a2d62a42cb8

  • SHA256

    75694e9fe51dcc16a24f106d54c13a8ab49d936e5d294ad18ccc541c470f5e75

  • SHA512

    52d4fc8a54c162504ec37d8485833b39613a06461a78d1bc82d2ae6c36d69bed42feb3f06d9989a9b6ece1ee3a66e30d2c983a2f657685e9033b75bc2364b729

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxMvDnwHKiROw97D8099EoQwctSt4734:fnyiQSoU5hzaVWkQCNBS

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      75694e9fe51dcc16a24f106d54c13a8ab49d936e5d294ad18ccc541c470f5e75

    • Size

      143KB

    • MD5

      f18424b131dd684257fe949b80b9505c

    • SHA1

      028f6393e6614c930542b41d6f2c4a2d62a42cb8

    • SHA256

      75694e9fe51dcc16a24f106d54c13a8ab49d936e5d294ad18ccc541c470f5e75

    • SHA512

      52d4fc8a54c162504ec37d8485833b39613a06461a78d1bc82d2ae6c36d69bed42feb3f06d9989a9b6ece1ee3a66e30d2c983a2f657685e9033b75bc2364b729

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxMvDnwHKiROw97D8099EoQwctSt4734:fnyiQSoU5hzaVWkQCNBS

    Score
    9/10
    ransomwareupx

    • Renames multiple (3438) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks