Overview

overview

9

Static

static

7

2ef67ed4ed...0N.exe

windows7-x64

9

2ef67ed4ed...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ef67ed4ed29674fa4782dc635698b00N.exe

  • Size

    87KB

  • Sample

    240724-bgw83asdrd

  • MD5

    2ef67ed4ed29674fa4782dc635698b00

  • SHA1

    afa08950219e54d49986b12b14cc87d095ae9dff

  • SHA256

    d27c6372e5fb2fa2c1ed3554aca47399a5540bd2b2b1aeaaa600748e16dc1b61

  • SHA512

    af7c9d099f1a06ccb53cb70a866ac5ed061be38ee86e18fe60265681c7a4b1ade50030d703660e07b62356904901ffed153e97c97e5ca42c408d44ebb9b7292f

  • SSDEEP

    1536:V7Zf/FAxTWoJJB7i2e7Zf/FAxTWoJJB7i2G:fny1c2Cny1c2G

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2ef67ed4ed29674fa4782dc635698b00N.exe

    • Size

      87KB

    • MD5

      2ef67ed4ed29674fa4782dc635698b00

    • SHA1

      afa08950219e54d49986b12b14cc87d095ae9dff

    • SHA256

      d27c6372e5fb2fa2c1ed3554aca47399a5540bd2b2b1aeaaa600748e16dc1b61

    • SHA512

      af7c9d099f1a06ccb53cb70a866ac5ed061be38ee86e18fe60265681c7a4b1ade50030d703660e07b62356904901ffed153e97c97e5ca42c408d44ebb9b7292f

    • SSDEEP

      1536:V7Zf/FAxTWoJJB7i2e7Zf/FAxTWoJJB7i2G:fny1c2Cny1c2G

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4195) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks