Overview

overview

10

Static

static

10

e816bf00c7...83.exe

windows7-x64

9

e816bf00c7...83.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e816bf00c7d3937a0fe4a34716de72efbac0bc2c399821daf0dab2076b68eb83

  • Size

    41KB

  • Sample

    240701-emdwfsyfrp

  • MD5

    660b9a459bbbc9d7fb04c42cca34499f

  • SHA1

    a9243222dbda1d819251d0918de0d95effecba0c

  • SHA256

    e816bf00c7d3937a0fe4a34716de72efbac0bc2c399821daf0dab2076b68eb83

  • SHA512

    72919179da217128d3a8715a670f3a87dfc06478d169fc044f130e42884a3c7aa8e763d0163555a7ed4e0d52af10ebd73b7054eb9e502a5baaf8115a60805371

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJo:V7Zf/FAxTWoJJ2WjWpf1fv

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      e816bf00c7d3937a0fe4a34716de72efbac0bc2c399821daf0dab2076b68eb83

    • Size

      41KB

    • MD5

      660b9a459bbbc9d7fb04c42cca34499f

    • SHA1

      a9243222dbda1d819251d0918de0d95effecba0c

    • SHA256

      e816bf00c7d3937a0fe4a34716de72efbac0bc2c399821daf0dab2076b68eb83

    • SHA512

      72919179da217128d3a8715a670f3a87dfc06478d169fc044f130e42884a3c7aa8e763d0163555a7ed4e0d52af10ebd73b7054eb9e502a5baaf8115a60805371

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJo:V7Zf/FAxTWoJJ2WjWpf1fv

    Score
    9/10
    ransomwareupx

    • Renames multiple (3423) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks