Overview

overview

9

Static

static

7

4c6d665451...7b.exe

windows7-x64

9

4c6d665451...7b.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c6d6654516d4f06195e0561edc3f1308aa1ae3110cf6bcfd984e3c1ee06127b

  • Size

    69KB

  • Sample

    240805-z7zc4syenq

  • MD5

    daffeb2dec61dc0b5596231bea7f1230

  • SHA1

    e98bb446ededa42e93f4a7a78a8b4912d12a9827

  • SHA256

    4c6d6654516d4f06195e0561edc3f1308aa1ae3110cf6bcfd984e3c1ee06127b

  • SHA512

    f604e98053837e043fdc5f3ab0d535e4debed587d12c2c204a40cbb55f30d7ff6c17ccd8490da61fc84d7dd49feddc8b65602d9b4d53b714b4c9a9c9ebb778ee

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeIiKx3:CTWJGpG/TWJGpGk43

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      4c6d6654516d4f06195e0561edc3f1308aa1ae3110cf6bcfd984e3c1ee06127b

    • Size

      69KB

    • MD5

      daffeb2dec61dc0b5596231bea7f1230

    • SHA1

      e98bb446ededa42e93f4a7a78a8b4912d12a9827

    • SHA256

      4c6d6654516d4f06195e0561edc3f1308aa1ae3110cf6bcfd984e3c1ee06127b

    • SHA512

      f604e98053837e043fdc5f3ab0d535e4debed587d12c2c204a40cbb55f30d7ff6c17ccd8490da61fc84d7dd49feddc8b65602d9b4d53b714b4c9a9c9ebb778ee

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeIiKx3:CTWJGpG/TWJGpGk43

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4010) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks