Overview

overview

9

Static

static

7

6cd47483da...0N.exe

windows7-x64

9

6cd47483da...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6cd47483da35edbe93d2d9c49d1c8fe0N.exe

  • Size

    72KB

  • Sample

    240803-jgmcvs1fnc

  • MD5

    6cd47483da35edbe93d2d9c49d1c8fe0

  • SHA1

    090b1680dc60bf0f2fd9ce366c1d636a7126eac8

  • SHA256

    8a9c03b6efadd365848c7b684101da165c1e63e6f841ad2e228a43bd3bb79f6f

  • SHA512

    6b214caca54faf06c13faf0bd30630c94d311acc0fd3be4ad97e0c5d0d443d75d0086740b4ee4c2a085dcaf07dcaa2b2c3ede2d6e96f352801f952f01126fc27

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiABT37CPKKdJJ1EXBwzEXBwdv:CTW7JJ7TTQoQWTW7JJ7TTQoQg

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6cd47483da35edbe93d2d9c49d1c8fe0N.exe

    • Size

      72KB

    • MD5

      6cd47483da35edbe93d2d9c49d1c8fe0

    • SHA1

      090b1680dc60bf0f2fd9ce366c1d636a7126eac8

    • SHA256

      8a9c03b6efadd365848c7b684101da165c1e63e6f841ad2e228a43bd3bb79f6f

    • SHA512

      6b214caca54faf06c13faf0bd30630c94d311acc0fd3be4ad97e0c5d0d443d75d0086740b4ee4c2a085dcaf07dcaa2b2c3ede2d6e96f352801f952f01126fc27

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiABT37CPKKdJJ1EXBwzEXBwdv:CTW7JJ7TTQoQWTW7JJ7TTQoQg

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4133) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks