Overview

overview

9

Static

static

7

981350c4b1...0N.exe

windows7-x64

9

981350c4b1...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    981350c4b155533d427252d6f3d23f20N.exe

  • Size

    111KB

  • Sample

    240802-ngwzhs1anc

  • MD5

    981350c4b155533d427252d6f3d23f20

  • SHA1

    c5459c41d6b5f7d0a473bb8817773fb4d43d1431

  • SHA256

    25f5dd9464b310c3b1c625caff61229cb1fa40815a0a17fd286f416a966e09ef

  • SHA512

    536ebad7c711dc32813cf6a089a5724384cea54440dbd479618eddc8bcd3bcc625f8652a93309a11e81d3e1087c62214c3ce8be1f20b21e71a962b7a3adbb67e

  • SSDEEP

    1536:V7Zf/FAxTWoJJXV6T6yb+7Zf/FAxTWoJJXV6T6ybm:fny1bbny1bP

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      981350c4b155533d427252d6f3d23f20N.exe

    • Size

      111KB

    • MD5

      981350c4b155533d427252d6f3d23f20

    • SHA1

      c5459c41d6b5f7d0a473bb8817773fb4d43d1431

    • SHA256

      25f5dd9464b310c3b1c625caff61229cb1fa40815a0a17fd286f416a966e09ef

    • SHA512

      536ebad7c711dc32813cf6a089a5724384cea54440dbd479618eddc8bcd3bcc625f8652a93309a11e81d3e1087c62214c3ce8be1f20b21e71a962b7a3adbb67e

    • SSDEEP

      1536:V7Zf/FAxTWoJJXV6T6yb+7Zf/FAxTWoJJXV6T6ybm:fny1bbny1bP

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4346) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks