Overview

overview

9

Static

static

7

65f32552c4...0N.exe

windows7-x64

9

65f32552c4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    65f32552c41df142719e9ae55fcecd50N.exe

  • Size

    133KB

  • Sample

    240817-g421qa1fnh

  • MD5

    65f32552c41df142719e9ae55fcecd50

  • SHA1

    c349b5159dc3516409440480c370d02ba3b80ab1

  • SHA256

    7ab58551391bcb9ba83d2d9fe3332612f8a7085ce3e819f5ee2e2db54a76bdfd

  • SHA512

    4e7a525515722b6efe941ffd1b6df055a8bfc6a833a54a26abe2429abdace6674b1159fd014e4f83e97d73c2bd2c2eda867c6fc7f7552c5eb257dad0c80e7891

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGvTWn1++PJHJXA/OsIZfz4:KQSohsUsUKjQSohsUsUKh

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      65f32552c41df142719e9ae55fcecd50N.exe

    • Size

      133KB

    • MD5

      65f32552c41df142719e9ae55fcecd50

    • SHA1

      c349b5159dc3516409440480c370d02ba3b80ab1

    • SHA256

      7ab58551391bcb9ba83d2d9fe3332612f8a7085ce3e819f5ee2e2db54a76bdfd

    • SHA512

      4e7a525515722b6efe941ffd1b6df055a8bfc6a833a54a26abe2429abdace6674b1159fd014e4f83e97d73c2bd2c2eda867c6fc7f7552c5eb257dad0c80e7891

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGvTWn1++PJHJXA/OsIZfz4:KQSohsUsUKjQSohsUsUKh

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3727) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks