Overview

overview

9

Static

static

7

9ac40bfa21...9e.exe

windows7-x64

9

9ac40bfa21...9e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ac40bfa21b3dac885fd22e49028cb558b9da987fe4176fafa17a2fbca89e29e

  • Size

    125KB

  • Sample

    240728-cecx3svekb

  • MD5

    60e51bcb9a9845999e44bd206947f1e0

  • SHA1

    e0baa412edff0330bbda1d756c70b41ce7a4a4be

  • SHA256

    9ac40bfa21b3dac885fd22e49028cb558b9da987fe4176fafa17a2fbca89e29e

  • SHA512

    f034921bed3fa18733dd40baf1a31d1c10232a3eb8a0d63696fd4bfd7c72838b8ad034e9f81be0308eb7a97cb2337a1557f1c2c61ce984a1ddfc2dc3e5829f82

  • SSDEEP

    3072:fny1aP2awclvmxrP2awclvmx7ny1aP2awclvmxrP2awclvmxt:KdU

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      9ac40bfa21b3dac885fd22e49028cb558b9da987fe4176fafa17a2fbca89e29e

    • Size

      125KB

    • MD5

      60e51bcb9a9845999e44bd206947f1e0

    • SHA1

      e0baa412edff0330bbda1d756c70b41ce7a4a4be

    • SHA256

      9ac40bfa21b3dac885fd22e49028cb558b9da987fe4176fafa17a2fbca89e29e

    • SHA512

      f034921bed3fa18733dd40baf1a31d1c10232a3eb8a0d63696fd4bfd7c72838b8ad034e9f81be0308eb7a97cb2337a1557f1c2c61ce984a1ddfc2dc3e5829f82

    • SSDEEP

      3072:fny1aP2awclvmxrP2awclvmx7ny1aP2awclvmxrP2awclvmxt:KdU

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (325) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks