Overview

overview

9

Static

static

7

68709354e0...0N.exe

windows7-x64

9

68709354e0...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    68709354e049dea4193da815e3d58100N.exe

  • Size

    67KB

  • Sample

    240906-zjtsqaxdrc

  • MD5

    68709354e049dea4193da815e3d58100

  • SHA1

    6f313939a9570c1c9fe1d26beaafdcfd95f27fbc

  • SHA256

    81751f1d3361cf3d70ed078c93853fde688d37f30ed4df7ca1438aaab32794a0

  • SHA512

    62bf14fb92fbb2b13b5bc8a92d031fcf4d51dbb869cba56c2f76fc0a0016863af9037e6490b1e9366b6db35974f12338d4cba83b3f0c84094786958c028ea521

  • SSDEEP

    1536:CTW7JJZENTNyoKIKMgTW7JJZENTNyoKIKMz:htE5KIKItE5KIKs

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      68709354e049dea4193da815e3d58100N.exe

    • Size

      67KB

    • MD5

      68709354e049dea4193da815e3d58100

    • SHA1

      6f313939a9570c1c9fe1d26beaafdcfd95f27fbc

    • SHA256

      81751f1d3361cf3d70ed078c93853fde688d37f30ed4df7ca1438aaab32794a0

    • SHA512

      62bf14fb92fbb2b13b5bc8a92d031fcf4d51dbb869cba56c2f76fc0a0016863af9037e6490b1e9366b6db35974f12338d4cba83b3f0c84094786958c028ea521

    • SSDEEP

      1536:CTW7JJZENTNyoKIKMgTW7JJZENTNyoKIKMz:htE5KIKItE5KIKs

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3514) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks