Overview

overview

10

Static

static

10

7e7ed0a7e8...82.exe

windows7-x64

9

7e7ed0a7e8...82.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e7ed0a7e88608c4ff19a7397cae52ac6630969c976e47d46abfa65a14782982.exe.compressed

  • Size

    160KB

  • Sample

    240128-3sraqsegej

  • MD5

    4e1846bf3ff2a29748c149356ae5a6cc

  • SHA1

    d5b23a64202378f4e7d15a35ce6f7969d89ac201

  • SHA256

    9ecb40dbeb33ba95371432f0f44bbc3f4bc816477a68e32d3300611654c2c0a2

  • SHA512

    2548e84dadd00cc73adaa2f64ff59b746d658d88f9b6fa7cf26c3033ff318887b44f791f75b26c587035af2dc8935dcec4260d5a2d61ef6d87dda0a4d5d0b515

  • SSDEEP

    3072:eFB3O3IRORghwODMJlz1dxoOXwupfWvsSQl7PnZ0rJM81SDRHKpfKaCpZ7v:QBZcIDqvysbpf6QtnZ0r5ps

Score
10/10
discoveryupx

Malware Config

Targets

    • Target

      7e7ed0a7e88608c4ff19a7397cae52ac6630969c976e47d46abfa65a14782982.exe.compressed

    • Size

      160KB

    • MD5

      4e1846bf3ff2a29748c149356ae5a6cc

    • SHA1

      d5b23a64202378f4e7d15a35ce6f7969d89ac201

    • SHA256

      9ecb40dbeb33ba95371432f0f44bbc3f4bc816477a68e32d3300611654c2c0a2

    • SHA512

      2548e84dadd00cc73adaa2f64ff59b746d658d88f9b6fa7cf26c3033ff318887b44f791f75b26c587035af2dc8935dcec4260d5a2d61ef6d87dda0a4d5d0b515

    • SSDEEP

      3072:eFB3O3IRORghwODMJlz1dxoOXwupfWvsSQl7PnZ0rJM81SDRHKpfKaCpZ7v:QBZcIDqvysbpf6QtnZ0r5ps

    Score
    9/10
    upxdiscovery

    • Detects command variations typically used by ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks