Overview

overview

9

Static

static

7

df24ce4a91...7e.exe

windows7-x64

9

df24ce4a91...7e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df24ce4a918bcba04ff093b47ae04fe4b8a904c203ec8d52646ef6f67a9b597e

  • Size

    121KB

  • Sample

    240727-fewxqsybjr

  • MD5

    0c6a8177ea07f166252d05b97e1148fe

  • SHA1

    aded01bfdfd4ead4c20fdd35ecbe045f7847e7c3

  • SHA256

    df24ce4a918bcba04ff093b47ae04fe4b8a904c203ec8d52646ef6f67a9b597e

  • SHA512

    5ac0627ac762f3aeb5c83370b0871170f89b433be1e17d5adc5001363d327c51b2807e0b005e5c4becc5d3dc8392ee8e3a7c3aa0ea4c605b0dc7d7353d53423b

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZxJfe/X8F:fnyiQSo7ZxJOX8F

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      df24ce4a918bcba04ff093b47ae04fe4b8a904c203ec8d52646ef6f67a9b597e

    • Size

      121KB

    • MD5

      0c6a8177ea07f166252d05b97e1148fe

    • SHA1

      aded01bfdfd4ead4c20fdd35ecbe045f7847e7c3

    • SHA256

      df24ce4a918bcba04ff093b47ae04fe4b8a904c203ec8d52646ef6f67a9b597e

    • SHA512

      5ac0627ac762f3aeb5c83370b0871170f89b433be1e17d5adc5001363d327c51b2807e0b005e5c4becc5d3dc8392ee8e3a7c3aa0ea4c605b0dc7d7353d53423b

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZxJfe/X8F:fnyiQSo7ZxJOX8F

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (1478) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks