Overview

overview

10

Static

static

10

1ee3509062...43.exe

windows7-x64

9

1ee3509062...43.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ee35090627919988d4d2994ba85547650f6d96c0484df60e246dcafb67abc43

  • Size

    54KB

  • Sample

    240628-x3asvasfnq

  • MD5

    520ad000928ff20c7b0d1000827b7304

  • SHA1

    045b3784c0517b32b11df0e2317d3fe5213b7188

  • SHA256

    1ee35090627919988d4d2994ba85547650f6d96c0484df60e246dcafb67abc43

  • SHA512

    e76fa93e6eace5e85d5cd4d932a7cc0571bdb78693f388fafad44f58f0312161874af626b7f08b67061896981cbce22aeb3aae646675367ceddd831001d581f9

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzl:CTWn1++PJHJXA/OsIZfzc3/Q8zxL

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      1ee35090627919988d4d2994ba85547650f6d96c0484df60e246dcafb67abc43

    • Size

      54KB

    • MD5

      520ad000928ff20c7b0d1000827b7304

    • SHA1

      045b3784c0517b32b11df0e2317d3fe5213b7188

    • SHA256

      1ee35090627919988d4d2994ba85547650f6d96c0484df60e246dcafb67abc43

    • SHA512

      e76fa93e6eace5e85d5cd4d932a7cc0571bdb78693f388fafad44f58f0312161874af626b7f08b67061896981cbce22aeb3aae646675367ceddd831001d581f9

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzl:CTWn1++PJHJXA/OsIZfzc3/Q8zxL

    Score
    9/10
    ransomwareupx

    • Renames multiple (3756) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks