Overview

overview

9

Static

static

7

5e86586e4b...e7.exe

windows7-x64

9

5e86586e4b...e7.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e86586e4b3acb09c423ac911f32c6cc216e00062ff735136b4c46f15fee56e7

  • Size

    116KB

  • Sample

    240828-2hhp6s1hpq

  • MD5

    a4c18918c4e3f46a15c35757bb9fef44

  • SHA1

    bd135c4bb3ea5eeaf2cf5b68319a0a96e3a79022

  • SHA256

    5e86586e4b3acb09c423ac911f32c6cc216e00062ff735136b4c46f15fee56e7

  • SHA512

    49a9b5db714ff0353f99a10c201189262f12c911430278f9e044dad86e673ef4f0ab8c42c11e10d4f84c58dae29e75551fa3f9b8af7233dce4d1d37842215eda

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxgTWn1++PJHJXA/OsIZfzc3/Q8zxD:KQSoRQSo+

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      5e86586e4b3acb09c423ac911f32c6cc216e00062ff735136b4c46f15fee56e7

    • Size

      116KB

    • MD5

      a4c18918c4e3f46a15c35757bb9fef44

    • SHA1

      bd135c4bb3ea5eeaf2cf5b68319a0a96e3a79022

    • SHA256

      5e86586e4b3acb09c423ac911f32c6cc216e00062ff735136b4c46f15fee56e7

    • SHA512

      49a9b5db714ff0353f99a10c201189262f12c911430278f9e044dad86e673ef4f0ab8c42c11e10d4f84c58dae29e75551fa3f9b8af7233dce4d1d37842215eda

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxgTWn1++PJHJXA/OsIZfzc3/Q8zxD:KQSoRQSo+

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4348) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks