Overview

overview

9

Static

static

7

5005c025bb...a0.exe

windows7-x64

9

5005c025bb...a0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5005c025bb25236d52a4caa92c85eea0.exe

  • Size

    77KB

  • Sample

    240706-g6nwwa1dra

  • MD5

    5005c025bb25236d52a4caa92c85eea0

  • SHA1

    e51fa6a934d481d3514fee63dcd2acbd43f305fe

  • SHA256

    8d079a974794dc4af0d5a8e1cb39c734924065927b41155080a6710d7c356056

  • SHA512

    755058c5975a66eaee317ae341f20ae35108df7f06e1544d8d573787d48ba80d16e2c69f6a5a4af741749be01bb248f3cb4d2926c742051be20d2e0e8f1c5eff

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcuX9km9k/fxRfxSBW:CTW8OmO/fxRfxYTW8OmO/fxRfxR

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5005c025bb25236d52a4caa92c85eea0.exe

    • Size

      77KB

    • MD5

      5005c025bb25236d52a4caa92c85eea0

    • SHA1

      e51fa6a934d481d3514fee63dcd2acbd43f305fe

    • SHA256

      8d079a974794dc4af0d5a8e1cb39c734924065927b41155080a6710d7c356056

    • SHA512

      755058c5975a66eaee317ae341f20ae35108df7f06e1544d8d573787d48ba80d16e2c69f6a5a4af741749be01bb248f3cb4d2926c742051be20d2e0e8f1c5eff

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcuX9km9k/fxRfxSBW:CTW8OmO/fxRfxYTW8OmO/fxRfxR

    Score
    9/10
    ransomwareupx

    • Renames multiple (5177) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks