Overview

overview

9

Static

static

7

5823924193...0N.exe

windows7-x64

9

5823924193...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    582392419356b8c6db796e79a473c500N.exe

  • Size

    91KB

  • Sample

    240802-ffslps1fnc

  • MD5

    582392419356b8c6db796e79a473c500

  • SHA1

    ee0f32130dbec698444da51c319118873cf9af7e

  • SHA256

    4abf685368376177b7c55bfb78bcfae07425c0859255da9ab7cee512edddf2b7

  • SHA512

    9c9580d55ba961eca0e9c40b1ad93d6f673e8a880cfb8b4fc276f44f413c75f1850b8da239f9c78fa0077459c146acad8ccd75afde3306ba133dfe818bc293c9

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyA3r7Zf/FAxTWoJJZENTNyA3LC44enYE/FXHFJV+C44enG:fny1tEP3Jny1tEP3P

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      582392419356b8c6db796e79a473c500N.exe

    • Size

      91KB

    • MD5

      582392419356b8c6db796e79a473c500

    • SHA1

      ee0f32130dbec698444da51c319118873cf9af7e

    • SHA256

      4abf685368376177b7c55bfb78bcfae07425c0859255da9ab7cee512edddf2b7

    • SHA512

      9c9580d55ba961eca0e9c40b1ad93d6f673e8a880cfb8b4fc276f44f413c75f1850b8da239f9c78fa0077459c146acad8ccd75afde3306ba133dfe818bc293c9

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyA3r7Zf/FAxTWoJJZENTNyA3LC44enYE/FXHFJV+C44enG:fny1tEP3Jny1tEP3P

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4806) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks