Overview

overview

9

Static

static

7

e9e184dd40...0N.exe

windows7-x64

9

e9e184dd40...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9e184dd40858924239c7b662cce7170N.exe

  • Size

    132KB

  • Sample

    240818-tr5x3avgmr

  • MD5

    e9e184dd40858924239c7b662cce7170

  • SHA1

    4e1b0b6e2d11bb4873226227fe5a75780767f807

  • SHA256

    73c3563728f962bcb8ff481474c28331da8598895b60ce1378619a5e3afba83c

  • SHA512

    5247aeb036da100940011c5be6568948aaf121acae9a9fbf3a40a45fc49254dc556056ac00bb1a9a81ce26ddbc37c0aa35c1457cb70830de8feea3506b831ade

  • SSDEEP

    1536:V7Zf/FAxTWoJJoTW7JJfI2IH7Zf/FAxTWoJJoTW7JJfI2Id2R2nvGRvGM:fny1L03Fny1L03d2R2nvGRvGM

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e9e184dd40858924239c7b662cce7170N.exe

    • Size

      132KB

    • MD5

      e9e184dd40858924239c7b662cce7170

    • SHA1

      4e1b0b6e2d11bb4873226227fe5a75780767f807

    • SHA256

      73c3563728f962bcb8ff481474c28331da8598895b60ce1378619a5e3afba83c

    • SHA512

      5247aeb036da100940011c5be6568948aaf121acae9a9fbf3a40a45fc49254dc556056ac00bb1a9a81ce26ddbc37c0aa35c1457cb70830de8feea3506b831ade

    • SSDEEP

      1536:V7Zf/FAxTWoJJoTW7JJfI2IH7Zf/FAxTWoJJoTW7JJfI2Id2R2nvGRvGM:fny1L03Fny1L03d2R2nvGRvGM

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4149) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks