Overview

overview

9

Static

static

7

7149d0808a...0N.exe

windows7-x64

9

7149d0808a...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7149d0808a40fa22d8edf5bf1a6c39d0N.exe

  • Size

    47KB

  • Sample

    240727-alhe2atgnq

  • MD5

    7149d0808a40fa22d8edf5bf1a6c39d0

  • SHA1

    c254d685076c530f85e6b825c007c8ffaa9f98b4

  • SHA256

    43d52e662f6f489be067fc6dce741834d617c7b775bfc63f1b32a51e08331d7c

  • SHA512

    ca718c6ebe8feb738213c97ca3cd0a126fb4530fc4620bff29df6e8f2a620b130c340efb797dbd5875f1365e6b392f5695d08cfd50bf08e0e981dd49328ca7ca

  • SSDEEP

    768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7luBT37CPKKdJJBZBZaOAOIB3jM2jM7lseR:CTW7JJB7LD2I2IOTW7JJB7LD2I2Ip

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      7149d0808a40fa22d8edf5bf1a6c39d0N.exe

    • Size

      47KB

    • MD5

      7149d0808a40fa22d8edf5bf1a6c39d0

    • SHA1

      c254d685076c530f85e6b825c007c8ffaa9f98b4

    • SHA256

      43d52e662f6f489be067fc6dce741834d617c7b775bfc63f1b32a51e08331d7c

    • SHA512

      ca718c6ebe8feb738213c97ca3cd0a126fb4530fc4620bff29df6e8f2a620b130c340efb797dbd5875f1365e6b392f5695d08cfd50bf08e0e981dd49328ca7ca

    • SSDEEP

      768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7luBT37CPKKdJJBZBZaOAOIB3jM2jM7lseR:CTW7JJB7LD2I2IOTW7JJB7LD2I2Ip

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (249) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks