Overview

overview

10

Static

static

10

ffafc4c110...44.exe

windows7-x64

9

ffafc4c110...44.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffafc4c110ebb0a732919e7c328ebe208a700487d1d3ef229fda499c150bdc44

  • Size

    46KB

  • Sample

    240701-fpfnhazgmr

  • MD5

    8ff30e0e2eeb28932789ada57c96bab3

  • SHA1

    364fc532ac06f389f1aebbee598373c0563da735

  • SHA256

    ffafc4c110ebb0a732919e7c328ebe208a700487d1d3ef229fda499c150bdc44

  • SHA512

    b47372b712be43d16c1995e09c26f101b1b97b1b48e24b1d1e8a13b6188ccfcbd7fc6120487e8329a9ad44396a080e974bc2c1d6c25a787748248c8a37ded371

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFz+:CTWn1++PJHJXA/OsIZfzc3/Q8zx4

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      ffafc4c110ebb0a732919e7c328ebe208a700487d1d3ef229fda499c150bdc44

    • Size

      46KB

    • MD5

      8ff30e0e2eeb28932789ada57c96bab3

    • SHA1

      364fc532ac06f389f1aebbee598373c0563da735

    • SHA256

      ffafc4c110ebb0a732919e7c328ebe208a700487d1d3ef229fda499c150bdc44

    • SHA512

      b47372b712be43d16c1995e09c26f101b1b97b1b48e24b1d1e8a13b6188ccfcbd7fc6120487e8329a9ad44396a080e974bc2c1d6c25a787748248c8a37ded371

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFz+:CTWn1++PJHJXA/OsIZfzc3/Q8zx4

    Score
    9/10
    ransomwareupx

    • Renames multiple (3455) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks