Overview

overview

9

Static

static

7

acf4ca62c4...0N.exe

windows7-x64

9

acf4ca62c4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acf4ca62c4e9f540bb2a78806aada9f0N.exe

  • Size

    123KB

  • Sample

    240905-dgw96sshkh

  • MD5

    acf4ca62c4e9f540bb2a78806aada9f0

  • SHA1

    92eeef95d6836ddb16e4f1e1236855f463cac586

  • SHA256

    d31ca70bba7a395dae130fa630aa0d61fbe507f58113586aa2cd1a9f41d4adf2

  • SHA512

    cc80f8d0db715a6ce5c8392171c8e35bb5a4b0affa322ad9318b257b6034a77992c8f8e163f938529240a2c5c306cf2b2ba370c0163170df2eef2d4cbbce6312

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/b8QpTWn1++PJHJXA/OsIZfzc3/Q8IZTkn:KQSo7Zgr4QNQSo7Zgr4QH

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      acf4ca62c4e9f540bb2a78806aada9f0N.exe

    • Size

      123KB

    • MD5

      acf4ca62c4e9f540bb2a78806aada9f0

    • SHA1

      92eeef95d6836ddb16e4f1e1236855f463cac586

    • SHA256

      d31ca70bba7a395dae130fa630aa0d61fbe507f58113586aa2cd1a9f41d4adf2

    • SHA512

      cc80f8d0db715a6ce5c8392171c8e35bb5a4b0affa322ad9318b257b6034a77992c8f8e163f938529240a2c5c306cf2b2ba370c0163170df2eef2d4cbbce6312

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/b8QpTWn1++PJHJXA/OsIZfzc3/Q8IZTkn:KQSo7Zgr4QNQSo7Zgr4QH

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4409) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks