Overview

overview

9

Static

static

7

2b2fb31114...0N.exe

windows7-x64

9

2b2fb31114...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b2fb31114fd5a6451cb7b6f09281100N.exe

  • Size

    56KB

  • Sample

    240905-3wy5ravhqd

  • MD5

    2b2fb31114fd5a6451cb7b6f09281100

  • SHA1

    cfc39e4fe9414c14f84e8cefe03e7cb84652ddc3

  • SHA256

    79284812259ab1ab95183ac225abb47824bbd119e714f6ac6dbdce492d83a010

  • SHA512

    4d8bed13f9d15e43eb1717127f18d914c8670b89bccbbe1e7357ae53fbea00099f97fa6c0b466b3b6fc8ffa1ac159f88bf7e5ce3ed34dfdf0d6e5d6a3364a3ef

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9woOzOuiJfoOzOuiJpBT37CPKKdJJ1EXBwzE2:CTW7JJ7T4MMTW7JJ7T4MIpg

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2b2fb31114fd5a6451cb7b6f09281100N.exe

    • Size

      56KB

    • MD5

      2b2fb31114fd5a6451cb7b6f09281100

    • SHA1

      cfc39e4fe9414c14f84e8cefe03e7cb84652ddc3

    • SHA256

      79284812259ab1ab95183ac225abb47824bbd119e714f6ac6dbdce492d83a010

    • SHA512

      4d8bed13f9d15e43eb1717127f18d914c8670b89bccbbe1e7357ae53fbea00099f97fa6c0b466b3b6fc8ffa1ac159f88bf7e5ce3ed34dfdf0d6e5d6a3364a3ef

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9woOzOuiJfoOzOuiJpBT37CPKKdJJ1EXBwzE2:CTW7JJ7T4MMTW7JJ7T4MIpg

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3802) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks