Overview

overview

9

Static

static

7

b43b3d2232...0N.exe

windows7-x64

9

b43b3d2232...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b43b3d2232d371ddae8f865b21439a60N.exe

  • Size

    115KB

  • Sample

    240818-d673zawdpq

  • MD5

    b43b3d2232d371ddae8f865b21439a60

  • SHA1

    320541d1fa7529e828edeea50d6a141ec7ce5885

  • SHA256

    daf57c17e4bf968fdb23e9b0bf56c25c32c2a94b6870d9ada3509ed68b800db6

  • SHA512

    44b7cf10e24f0e68eae7e6bcd18072af87aa19343f71f6fc3d943ab6c33fd471662b435962a27c0fcd7002857fbefbac85514c3b6ff7170c54120d6635f69608

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5HTWn1++PJHJXA/OsIZfzc3/Q8zxY57:KQSox5DQSox57

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b43b3d2232d371ddae8f865b21439a60N.exe

    • Size

      115KB

    • MD5

      b43b3d2232d371ddae8f865b21439a60

    • SHA1

      320541d1fa7529e828edeea50d6a141ec7ce5885

    • SHA256

      daf57c17e4bf968fdb23e9b0bf56c25c32c2a94b6870d9ada3509ed68b800db6

    • SHA512

      44b7cf10e24f0e68eae7e6bcd18072af87aa19343f71f6fc3d943ab6c33fd471662b435962a27c0fcd7002857fbefbac85514c3b6ff7170c54120d6635f69608

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5HTWn1++PJHJXA/OsIZfzc3/Q8zxY57:KQSox5DQSox57

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4246) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks