Overview

overview

9

Static

static

7

911300e166...0N.exe

windows7-x64

9

911300e166...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    911300e1664e57be82c863f145fbd570N.exe

  • Size

    147KB

  • Sample

    240817-d1pz7sxhmn

  • MD5

    911300e1664e57be82c863f145fbd570

  • SHA1

    bb01f40beabd08f598fdbbd19bd724fad9a30c33

  • SHA256

    c73c20b2c758d2c4f85c4612b4b6fbacbcf6af89932f2f9dc54e761f1103b770

  • SHA512

    588b6e08c907e7e35c7a7ac774e0c129454cd95c3e1b50aca1f7bbb920dc412a4e2e345201210359654b56b56c759adf1353b7816e8a78d33fa91f90d992708e

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCu7ZyqaFAxTWH1++PJHJXA/Os6:enaypQSoskZnaypQSoskf0z0J

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      911300e1664e57be82c863f145fbd570N.exe

    • Size

      147KB

    • MD5

      911300e1664e57be82c863f145fbd570

    • SHA1

      bb01f40beabd08f598fdbbd19bd724fad9a30c33

    • SHA256

      c73c20b2c758d2c4f85c4612b4b6fbacbcf6af89932f2f9dc54e761f1103b770

    • SHA512

      588b6e08c907e7e35c7a7ac774e0c129454cd95c3e1b50aca1f7bbb920dc412a4e2e345201210359654b56b56c759adf1353b7816e8a78d33fa91f90d992708e

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCu7ZyqaFAxTWH1++PJHJXA/Os6:enaypQSoskZnaypQSoskf0z0J

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3794) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks