Overview

overview

10

Static

static

10

36b2bd7f70...6e.exe

windows7-x64

9

36b2bd7f70...6e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    36b2bd7f70045e5f546f248368e8a5df2b601192a9420d96db1f58662228d16e

  • Size

    42KB

  • Sample

    240629-yy2ansycpj

  • MD5

    fea36323ec0714b7fff6693a047c2ab1

  • SHA1

    ace092122396a1a5bd9e3438b7243b46859712a3

  • SHA256

    36b2bd7f70045e5f546f248368e8a5df2b601192a9420d96db1f58662228d16e

  • SHA512

    2d718c2e406b037caaa54f4e3b984da81f22f8527d83abc75d9ff7c21d2bb948e9a5683627018f97418a94b300cec60c9ded6851f136c1f972cdaeba4170489f

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB7:V7Zf/FAxTWoJJB7LD6

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      36b2bd7f70045e5f546f248368e8a5df2b601192a9420d96db1f58662228d16e

    • Size

      42KB

    • MD5

      fea36323ec0714b7fff6693a047c2ab1

    • SHA1

      ace092122396a1a5bd9e3438b7243b46859712a3

    • SHA256

      36b2bd7f70045e5f546f248368e8a5df2b601192a9420d96db1f58662228d16e

    • SHA512

      2d718c2e406b037caaa54f4e3b984da81f22f8527d83abc75d9ff7c21d2bb948e9a5683627018f97418a94b300cec60c9ded6851f136c1f972cdaeba4170489f

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB7:V7Zf/FAxTWoJJB7LD6

    Score
    9/10
    ransomwareupx

    • Renames multiple (3763) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks