Overview

overview

9

Static

static

7

e7d2d2835d...0N.exe

windows7-x64

9

e7d2d2835d...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e7d2d2835d3f8683b60dd8f23fbdbad0N.exe

  • Size

    138KB

  • Sample

    240721-tqxv3avfkc

  • MD5

    e7d2d2835d3f8683b60dd8f23fbdbad0

  • SHA1

    d1702ef849ed83af6aea6c1259fa7ae45ee5d4dc

  • SHA256

    e113dc735c600b3c710a94a0af90218bd293d29572870ac6be11af7d3f6c755a

  • SHA512

    d2d569ca25de351c64b45d0b0ca1d297ce3bab512dd2f3cbfd7df68602d90c497501edbc406df9b6ae1fc7633837c97524056dec75b479bf70dd7dbec6056970

  • SSDEEP

    1536:V7Zf/FAxTWoJJ0TW7JJQOns37Zf/FAxTWoJJ0TW7JJQOnsF:fny1/8Os1ny1/8OsF

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      e7d2d2835d3f8683b60dd8f23fbdbad0N.exe

    • Size

      138KB

    • MD5

      e7d2d2835d3f8683b60dd8f23fbdbad0

    • SHA1

      d1702ef849ed83af6aea6c1259fa7ae45ee5d4dc

    • SHA256

      e113dc735c600b3c710a94a0af90218bd293d29572870ac6be11af7d3f6c755a

    • SHA512

      d2d569ca25de351c64b45d0b0ca1d297ce3bab512dd2f3cbfd7df68602d90c497501edbc406df9b6ae1fc7633837c97524056dec75b479bf70dd7dbec6056970

    • SSDEEP

      1536:V7Zf/FAxTWoJJ0TW7JJQOns37Zf/FAxTWoJJ0TW7JJQOnsF:fny1/8Os1ny1/8OsF

    Score
    9/10
    ransomwareupx

    • Renames multiple (3379) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks