Overview

overview

9

Static

static

7

5f32ea4ad2...0N.exe

windows7-x64

9

5f32ea4ad2...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f32ea4ad2b2198b4b5d5449f61d1770N.exe

  • Size

    125KB

  • Sample

    240904-1v6r4axbrp

  • MD5

    5f32ea4ad2b2198b4b5d5449f61d1770

  • SHA1

    e60423efd024c5c24e6431170c52e866112b540e

  • SHA256

    298097855e021a2de5d6f22e7165c0d679fbad8bb529e551e519a8ba794348ec

  • SHA512

    309237832e5ccab63ef947afb7c161c1946d24104b30ef5961ab173221ea7088bf712b764f399a5320127dea0da4d9d1cbf3c81d9da427d78db9371cc42ef159

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTMAeAQTWn1++PJHJXA/OsIZfzc3/Q8IZTMAeW:KQSo7ZSQSo7Zd

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      5f32ea4ad2b2198b4b5d5449f61d1770N.exe

    • Size

      125KB

    • MD5

      5f32ea4ad2b2198b4b5d5449f61d1770

    • SHA1

      e60423efd024c5c24e6431170c52e866112b540e

    • SHA256

      298097855e021a2de5d6f22e7165c0d679fbad8bb529e551e519a8ba794348ec

    • SHA512

      309237832e5ccab63ef947afb7c161c1946d24104b30ef5961ab173221ea7088bf712b764f399a5320127dea0da4d9d1cbf3c81d9da427d78db9371cc42ef159

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTMAeAQTWn1++PJHJXA/OsIZfzc3/Q8IZTMAeW:KQSo7ZSQSo7Zd

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (417) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks