Overview

overview

9

Static

static

7

1cb8b3393d...0N.exe

windows7-x64

9

1cb8b3393d...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cb8b3393df82040591d9df2bb27d690N.exe

  • Size

    47KB

  • Sample

    240817-e5bh2szhkl

  • MD5

    1cb8b3393df82040591d9df2bb27d690

  • SHA1

    2144bd04dfa41c7924223ba7fae44a23e5d0cc7f

  • SHA256

    758674f01b1155a9249cd3db5b64a33c568c958e3f2e2d8e04ff7296e6742668

  • SHA512

    6471114950c19e0c9689657287b8607f0f57fe0e59b95479b46ee582d8cd7116b6e411ad79e42833ad378b7dd2ae79e46af5853a8fe94868849d3b3eb1fe6339

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9VBT37CPKKdJJ1EXBwzEXBwdcMcI9IQ8Ql:CTW7JJ7T9TW7JJ7TVfl

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1cb8b3393df82040591d9df2bb27d690N.exe

    • Size

      47KB

    • MD5

      1cb8b3393df82040591d9df2bb27d690

    • SHA1

      2144bd04dfa41c7924223ba7fae44a23e5d0cc7f

    • SHA256

      758674f01b1155a9249cd3db5b64a33c568c958e3f2e2d8e04ff7296e6742668

    • SHA512

      6471114950c19e0c9689657287b8607f0f57fe0e59b95479b46ee582d8cd7116b6e411ad79e42833ad378b7dd2ae79e46af5853a8fe94868849d3b3eb1fe6339

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9VBT37CPKKdJJ1EXBwzEXBwdcMcI9IQ8Ql:CTW7JJ7T9TW7JJ7TVfl

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3861) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks