Overview

overview

10

Static

static

10

efc4cb1e30...12.exe

windows7-x64

9

efc4cb1e30...12.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efc4cb1e306ce9ff8cdd11f8acd267629a944a6b354ee75d3511fd3c3a067812

  • Size

    79KB

  • Sample

    240701-e29xfazblj

  • MD5

    b2b9af1b6ad5626dd92bc597e3bb0505

  • SHA1

    8a625a9c40ba3f8c1d874182bd9b76511f64e189

  • SHA256

    efc4cb1e306ce9ff8cdd11f8acd267629a944a6b354ee75d3511fd3c3a067812

  • SHA512

    3bb40a697ccd515f9df4c11819498cedeb79f8e8b0588dc8105a77ae01c7b3b86de66f36f762e8ba93be8bd2aa7d0c9be15a3ee3444b324f2d02819058b283ae

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8VCnXxX81jmQJHdJHn:enaypQSoPXxXe

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      efc4cb1e306ce9ff8cdd11f8acd267629a944a6b354ee75d3511fd3c3a067812

    • Size

      79KB

    • MD5

      b2b9af1b6ad5626dd92bc597e3bb0505

    • SHA1

      8a625a9c40ba3f8c1d874182bd9b76511f64e189

    • SHA256

      efc4cb1e306ce9ff8cdd11f8acd267629a944a6b354ee75d3511fd3c3a067812

    • SHA512

      3bb40a697ccd515f9df4c11819498cedeb79f8e8b0588dc8105a77ae01c7b3b86de66f36f762e8ba93be8bd2aa7d0c9be15a3ee3444b324f2d02819058b283ae

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8VCnXxX81jmQJHdJHn:enaypQSoPXxXe

    Score
    9/10
    ransomwareupx

    • Renames multiple (3440) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks