Overview

overview

10

Static

static

10

411d515882...a2.exe

windows7-x64

9

411d515882...a2.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    411d5158821891774d4e4d5a5d7fcd3d9ee904d8e379070cc69c0a82eb47f8a2

  • Size

    53KB

  • Sample

    240629-zewfraygqr

  • MD5

    a860d124f3f242d8a476473f4521c55a

  • SHA1

    0b0e621ef1f94b264ff4d072322f6b3978c5a6d7

  • SHA256

    411d5158821891774d4e4d5a5d7fcd3d9ee904d8e379070cc69c0a82eb47f8a2

  • SHA512

    eb6e3ced18fbfbc0303cbd6c1f8b973db8c39af30a2135ba8f55de868bbc78ff2f43108b07f1dd2bef1a02d34854a8b7ba1f128909e8dfa00d291f11ab22b706

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzX:CTWn1++PJHJXA/OsIZfzc3/Q8zxfXxXj

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      411d5158821891774d4e4d5a5d7fcd3d9ee904d8e379070cc69c0a82eb47f8a2

    • Size

      53KB

    • MD5

      a860d124f3f242d8a476473f4521c55a

    • SHA1

      0b0e621ef1f94b264ff4d072322f6b3978c5a6d7

    • SHA256

      411d5158821891774d4e4d5a5d7fcd3d9ee904d8e379070cc69c0a82eb47f8a2

    • SHA512

      eb6e3ced18fbfbc0303cbd6c1f8b973db8c39af30a2135ba8f55de868bbc78ff2f43108b07f1dd2bef1a02d34854a8b7ba1f128909e8dfa00d291f11ab22b706

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzX:CTWn1++PJHJXA/OsIZfzc3/Q8zxfXxXj

    Score
    9/10
    ransomwareupx

    • Renames multiple (3791) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks