Overview

overview

9

Static

static

7

3031f99654...99.exe

windows7-x64

9

3031f99654...99.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3031f99654bf2966d04d33808c86f83539ee7371dd7992fea423293191374799

  • Size

    117KB

  • Sample

    240727-zkhf3s1djd

  • MD5

    8f1be82ea374f4dbebde2f50bf4a2320

  • SHA1

    94d8042be32dd6c41778977be76a7f0a65489975

  • SHA256

    3031f99654bf2966d04d33808c86f83539ee7371dd7992fea423293191374799

  • SHA512

    3d263c141bacef8e5a4aa20c6e5b7a3882a715ad6ef5491d9e063be391b4adeb42c0bdf216c473f381e9c7d34324cda9216c1f04eee9e6174909db99e242dd2e

  • SSDEEP

    3072:fny1aP2awclvmxrP2awclvmxKny1aP2awclvmxrP2awclvmxo:Ki9

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      3031f99654bf2966d04d33808c86f83539ee7371dd7992fea423293191374799

    • Size

      117KB

    • MD5

      8f1be82ea374f4dbebde2f50bf4a2320

    • SHA1

      94d8042be32dd6c41778977be76a7f0a65489975

    • SHA256

      3031f99654bf2966d04d33808c86f83539ee7371dd7992fea423293191374799

    • SHA512

      3d263c141bacef8e5a4aa20c6e5b7a3882a715ad6ef5491d9e063be391b4adeb42c0bdf216c473f381e9c7d34324cda9216c1f04eee9e6174909db99e242dd2e

    • SSDEEP

      3072:fny1aP2awclvmxrP2awclvmxKny1aP2awclvmxrP2awclvmxo:Ki9

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (322) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks