General

  • Target

    7c096773ddfb7980828113aef0593940N.exe

  • Size

    173KB

  • Sample

    240721-g7gtysvhld

  • MD5

    7c096773ddfb7980828113aef0593940

  • SHA1

    a7390d038b312c8a7d111116f79beaea5b4b90c9

  • SHA256

    e729d39b7de9e80d369d852be09c916d798149fda8e891fd5512e1d2abf6439f

  • SHA512

    d3f1fe3815cda31f8a422e314f391fefef62e32352cd0c997817266d06551df10d645b09ffc6d9ccb4669caa2bd30b1cd223a060b6a916dca602adc8bc155a20

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8jsfEiKpi7ZyqaFAxTWH1++PJHJXA/O3:enaypQSoTEibnaypQSoTEiB

Score
9/10

Malware Config

Targets

    • Target

      7c096773ddfb7980828113aef0593940N.exe

    • Size

      173KB

    • MD5

      7c096773ddfb7980828113aef0593940

    • SHA1

      a7390d038b312c8a7d111116f79beaea5b4b90c9

    • SHA256

      e729d39b7de9e80d369d852be09c916d798149fda8e891fd5512e1d2abf6439f

    • SHA512

      d3f1fe3815cda31f8a422e314f391fefef62e32352cd0c997817266d06551df10d645b09ffc6d9ccb4669caa2bd30b1cd223a060b6a916dca602adc8bc155a20

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8jsfEiKpi7ZyqaFAxTWH1++PJHJXA/O3:enaypQSoTEibnaypQSoTEiB

    Score
    9/10
    • Renames multiple (3497) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks