Overview

overview

9

Static

static

7

22de549e3b...0N.exe

windows7-x64

9

22de549e3b...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    22de549e3b3b892ba998a9afc81ca760N.exe

  • Size

    129KB

  • Sample

    240723-3vv2pswarr

  • MD5

    22de549e3b3b892ba998a9afc81ca760

  • SHA1

    ee53ed9358a9f69cf0aeedd6fc99298932185026

  • SHA256

    33de59cb3b4a0dcbec2a70b764c99a1074c55ec4b7b8662ee4d0bbdda8ff8f31

  • SHA512

    61802ff067a66ecbbad1c222e0dcc5853e182b21cea0a2913bcde142b8fbb805ac52757686be52eaade4fb858e31b834455219f573d10d747d4a47f85828c5d1

  • SSDEEP

    3072:htEZw9tuTOHpYq1fq2xzrKTen+/AdSTBUSZEQ:fEZGOOHFlxzDwGSTB5B

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      22de549e3b3b892ba998a9afc81ca760N.exe

    • Size

      129KB

    • MD5

      22de549e3b3b892ba998a9afc81ca760

    • SHA1

      ee53ed9358a9f69cf0aeedd6fc99298932185026

    • SHA256

      33de59cb3b4a0dcbec2a70b764c99a1074c55ec4b7b8662ee4d0bbdda8ff8f31

    • SHA512

      61802ff067a66ecbbad1c222e0dcc5853e182b21cea0a2913bcde142b8fbb805ac52757686be52eaade4fb858e31b834455219f573d10d747d4a47f85828c5d1

    • SSDEEP

      3072:htEZw9tuTOHpYq1fq2xzrKTen+/AdSTBUSZEQ:fEZGOOHFlxzDwGSTB5B

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (333) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks