Overview

overview

9

Static

static

7

520fb96673...0N.exe

windows7-x64

9

520fb96673...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    520fb966738dd741a4c47fd647225d20N.exe

  • Size

    122KB

  • Sample

    240726-zee4rswfrc

  • MD5

    520fb966738dd741a4c47fd647225d20

  • SHA1

    4929e6252a20a74ae7ce53af1444bee1b3bc8595

  • SHA256

    301d3682a27b96ba609fb353e26866557e210cccc6cec2dec66f3ff138ff5162

  • SHA512

    947a546f854021d6b428e73ac979461aa7222d9ee6a4c3d0a6206aa646aad2b1c509fa4ab40bdeead12ac0231eee57595bda95da510ca0e8a0902228703bddf8

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsxe+eX7n97nwvxlTWn1++PJHJXA/OsIZfzcU:KQSohsUsxe+erZMQSohsUsxe+erZT

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      520fb966738dd741a4c47fd647225d20N.exe

    • Size

      122KB

    • MD5

      520fb966738dd741a4c47fd647225d20

    • SHA1

      4929e6252a20a74ae7ce53af1444bee1b3bc8595

    • SHA256

      301d3682a27b96ba609fb353e26866557e210cccc6cec2dec66f3ff138ff5162

    • SHA512

      947a546f854021d6b428e73ac979461aa7222d9ee6a4c3d0a6206aa646aad2b1c509fa4ab40bdeead12ac0231eee57595bda95da510ca0e8a0902228703bddf8

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsxe+eX7n97nwvxlTWn1++PJHJXA/OsIZfzcU:KQSohsUsxe+erZMQSohsUsxe+erZT

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3259) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks