Overview

overview

9

Static

static

7

34939fb2ba...0N.exe

windows7-x64

9

34939fb2ba...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34939fb2ba79f0e620344a0c4ba430f0N.exe

  • Size

    134KB

  • Sample

    240806-bcrg1sxhqh

  • MD5

    34939fb2ba79f0e620344a0c4ba430f0

  • SHA1

    669f683f6da633f817bbd4067cd0e7b370098e3a

  • SHA256

    37999d1fcc076ab9943b0e5aa5567b383c361513ebc164d0f7b7d1884b56fe82

  • SHA512

    023229d3c9b2ffb04a0dd55e84d0162dd532efcc01c928a190084789f3fe51d2f7b5d9d009cdb66fdcdea597a8a7926982c737a64eb2ac0b13f1164afd659b1a

  • SSDEEP

    1536:V7Zf/FAxTWxOmO/fxRfx46f7Zf/FAxTWxOmO/fxRfx46U:fny+Tuf7f/ny+Tuf7fW

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      34939fb2ba79f0e620344a0c4ba430f0N.exe

    • Size

      134KB

    • MD5

      34939fb2ba79f0e620344a0c4ba430f0

    • SHA1

      669f683f6da633f817bbd4067cd0e7b370098e3a

    • SHA256

      37999d1fcc076ab9943b0e5aa5567b383c361513ebc164d0f7b7d1884b56fe82

    • SHA512

      023229d3c9b2ffb04a0dd55e84d0162dd532efcc01c928a190084789f3fe51d2f7b5d9d009cdb66fdcdea597a8a7926982c737a64eb2ac0b13f1164afd659b1a

    • SSDEEP

      1536:V7Zf/FAxTWxOmO/fxRfx46f7Zf/FAxTWxOmO/fxRfx46U:fny+Tuf7f/ny+Tuf7fW

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4848) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks