Overview

overview

9

Static

static

7

044916cb59...0N.exe

windows7-x64

9

044916cb59...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    044916cb5912a4af99997ab93e9c4a90N.exe

  • Size

    485KB

  • Sample

    240805-znsffsxhrk

  • MD5

    044916cb5912a4af99997ab93e9c4a90

  • SHA1

    d868476df6d8ac58281e66e7bd45d2870989405b

  • SHA256

    6e90ce9865b0268e368e4dbeb0b1b8d14c36096c65d3733b4d2b6b12ad5898b8

  • SHA512

    9588bc20098420cb33c6936b35a30446cae65fcc2ef2e995436716892300b44e258ddcdaed42fc2d4d33d3356f76bb0d0e41b56130f5dc4d4088c4101bb537dd

  • SSDEEP

    6144:eYrIOXsqmWzJrdc6GJRQUWGUA9PRWLiFSbE56FORF6:+2lWRPWhA9PRWg9q

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      044916cb5912a4af99997ab93e9c4a90N.exe

    • Size

      485KB

    • MD5

      044916cb5912a4af99997ab93e9c4a90

    • SHA1

      d868476df6d8ac58281e66e7bd45d2870989405b

    • SHA256

      6e90ce9865b0268e368e4dbeb0b1b8d14c36096c65d3733b4d2b6b12ad5898b8

    • SHA512

      9588bc20098420cb33c6936b35a30446cae65fcc2ef2e995436716892300b44e258ddcdaed42fc2d4d33d3356f76bb0d0e41b56130f5dc4d4088c4101bb537dd

    • SSDEEP

      6144:eYrIOXsqmWzJrdc6GJRQUWGUA9PRWLiFSbE56FORF6:+2lWRPWhA9PRWg9q

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3353) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks