Overview

overview

9

Static

static

7

be12c8d799...9f.exe

windows7-x64

9

be12c8d799...9f.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    be12c8d799fcf64e1530e55d1f4401b7cf8c4b2b12254ff980bdeaf0ffede89f

  • Size

    75KB

  • Sample

    240803-cxymhavdqa

  • MD5

    bce0db240066a83f90d4c4445439aaf1

  • SHA1

    59836a9e76d8de984c97ade9351299fb61dcf6ac

  • SHA256

    be12c8d799fcf64e1530e55d1f4401b7cf8c4b2b12254ff980bdeaf0ffede89f

  • SHA512

    87a469597bc9963809342727e5e2a7322e0582209f1e7544033074a03588172c1ddafe639d0ea77c52a3030a9fc28bee344c1eb882ef479d611ea82d6f718923

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdv:CTWUnMdyGdygTWUnMdyGdy9

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      be12c8d799fcf64e1530e55d1f4401b7cf8c4b2b12254ff980bdeaf0ffede89f

    • Size

      75KB

    • MD5

      bce0db240066a83f90d4c4445439aaf1

    • SHA1

      59836a9e76d8de984c97ade9351299fb61dcf6ac

    • SHA256

      be12c8d799fcf64e1530e55d1f4401b7cf8c4b2b12254ff980bdeaf0ffede89f

    • SHA512

      87a469597bc9963809342727e5e2a7322e0582209f1e7544033074a03588172c1ddafe639d0ea77c52a3030a9fc28bee344c1eb882ef479d611ea82d6f718923

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdv:CTWUnMdyGdygTWUnMdyGdy9

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4565) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks