Overview

overview

9

Static

static

7

1cfd1349c7...b8.exe

windows7-x64

9

1cfd1349c7...b8.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cfd1349c78a9ecd8998139f30876c8b7cffd7be052d0c165694782dc9239eb8

  • Size

    164KB

  • Sample

    240630-x3mseawfmm

  • MD5

    87db0b66e1a8eff4148bbd8028aff4d0

  • SHA1

    68f5ea41e2c18f6abc34258886f8cd405b9dfb4f

  • SHA256

    1cfd1349c78a9ecd8998139f30876c8b7cffd7be052d0c165694782dc9239eb8

  • SHA512

    45ed99a1b9c5bd624833d5cdbe333e6e881a033ea50b4709c5e22f63fa2a2ec4601c0d64cad24f1579abb381af79ddd63154c3e5845044f8b592aef062639f69

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8OyZ2FdldJTWn1++PJHJXA/OsIZfzc3/S:fnyiQSonyZ2FdldtQSonyZ2Fdldz

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1cfd1349c78a9ecd8998139f30876c8b7cffd7be052d0c165694782dc9239eb8

    • Size

      164KB

    • MD5

      87db0b66e1a8eff4148bbd8028aff4d0

    • SHA1

      68f5ea41e2c18f6abc34258886f8cd405b9dfb4f

    • SHA256

      1cfd1349c78a9ecd8998139f30876c8b7cffd7be052d0c165694782dc9239eb8

    • SHA512

      45ed99a1b9c5bd624833d5cdbe333e6e881a033ea50b4709c5e22f63fa2a2ec4601c0d64cad24f1579abb381af79ddd63154c3e5845044f8b592aef062639f69

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8OyZ2FdldJTWn1++PJHJXA/OsIZfzc3/S:fnyiQSonyZ2FdldtQSonyZ2Fdldz

    Score
    9/10
    ransomwareupx

    • Renames multiple (2854) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks