Overview

overview

9

Static

static

7

ee06d009d5...0N.exe

windows7-x64

9

ee06d009d5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee06d009d555558cca27412aba13faf0N.exe

  • Size

    81KB

  • Sample

    240829-gnv78syerl

  • MD5

    ee06d009d555558cca27412aba13faf0

  • SHA1

    5a162a0654b298b6e0d741e35e3bcee9742c0c0b

  • SHA256

    a826b2b4cfb1259d8bd218684af06b7bf47788c0a5764f1d891f4fc2a7dda470

  • SHA512

    26eb5a501431d2cb654bb9ab7c71c3f3724f11d6784f272d3dffbe5577b1d2d02f1c68591896b985bfa19794be0e3f6aa86dfae21fffcf2a3bd4d1c05cf822fc

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tigcaBT37CPKKdJJ1EXBwzEXBr:CTW7JJ7TTQoQgcATW7JJ7TTQoQgcF

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      ee06d009d555558cca27412aba13faf0N.exe

    • Size

      81KB

    • MD5

      ee06d009d555558cca27412aba13faf0

    • SHA1

      5a162a0654b298b6e0d741e35e3bcee9742c0c0b

    • SHA256

      a826b2b4cfb1259d8bd218684af06b7bf47788c0a5764f1d891f4fc2a7dda470

    • SHA512

      26eb5a501431d2cb654bb9ab7c71c3f3724f11d6784f272d3dffbe5577b1d2d02f1c68591896b985bfa19794be0e3f6aa86dfae21fffcf2a3bd4d1c05cf822fc

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tigcaBT37CPKKdJJ1EXBwzEXBr:CTW7JJ7TTQoQgcATW7JJ7TTQoQgcF

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4468) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks