Overview

overview

9

Static

static

7

6f044d7348...0N.exe

windows7-x64

9

6f044d7348...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f044d7348d0f18dfbc6e2d620189220N.exe

  • Size

    167KB

  • Sample

    240817-d7wrbsvfrf

  • MD5

    6f044d7348d0f18dfbc6e2d620189220

  • SHA1

    8ca3b3228b0d09ab328e1da796eac6ddf1a66c9d

  • SHA256

    b94cb652771b74f7e4b9ad382d45f2dbfbd3c062cac48f6835bcd6ae3fec9faa

  • SHA512

    b2521d0f256ccca567ef7fd1c6c521dd9f0196cdd4ba4b7eb9ecb48f39428895a95cbce112c4203620348024ce81918175e377c5a5c3dfc69cdae3b2a73740f5

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxQiKJAWJAz7Zf/FAxTWY1++PJHJXA/M:fnyiQSoqnyiQSoIYB

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6f044d7348d0f18dfbc6e2d620189220N.exe

    • Size

      167KB

    • MD5

      6f044d7348d0f18dfbc6e2d620189220

    • SHA1

      8ca3b3228b0d09ab328e1da796eac6ddf1a66c9d

    • SHA256

      b94cb652771b74f7e4b9ad382d45f2dbfbd3c062cac48f6835bcd6ae3fec9faa

    • SHA512

      b2521d0f256ccca567ef7fd1c6c521dd9f0196cdd4ba4b7eb9ecb48f39428895a95cbce112c4203620348024ce81918175e377c5a5c3dfc69cdae3b2a73740f5

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxQiKJAWJAz7Zf/FAxTWY1++PJHJXA/M:fnyiQSoqnyiQSoIYB

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3480) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks