2f348d6a86b7c5196f1e8e44de7e4f4716707af48367e3746e960bf0099c8fdf | Triage

Submit
Reports

Overview

overview

9

Static

static

7

3edf17f985...0N.exe

windows7-x64

7

3edf17f985...0N.exe

windows10-2004-x64

9

Sharing

General

Target

3edf17f985bf68be123edc894fd61190N
Size

5.7MB
Sample

240912-p9zfsawdjr
MD5

3edf17f985bf68be123edc894fd61190
SHA1

8e2cd7b91073c1d792972742b89974f3ccfec3c7
SHA256

2f348d6a86b7c5196f1e8e44de7e4f4716707af48367e3746e960bf0099c8fdf
SHA512

051a23653fbae90df49e28f8a059eee681e7c19ae33df3be865929332a84a14ed198979fbbcaa410cfa78900f8384bb8a0dbf40fc873ffe8c0f703c0738208e4
SSDEEP

98304:gCQUA1OjhJTlBR1AebLrfjBevMu9Rqxkgn6lnwOmQvcQunlmoixgeXueb1:gCPhh1RrbLrfjBYRFbnR1EQunlmokgeb

Score

9^/10

defense_evasion execution impact ransomware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3edf17f985bf68be123edc894fd61190N.exe

Resource

win7-20240704-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral2

Sample

3edf17f985bf68be123edc894fd61190N.exe

Resource

win10v2004-20240802-en

defense_evasion execution impact ransomware upx

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  3edf17f985bf68be123edc894fd61190N
- Size
  
  5.7MB
- MD5
  
  3edf17f985bf68be123edc894fd61190
- SHA1
  
  8e2cd7b91073c1d792972742b89974f3ccfec3c7
- SHA256
  
  2f348d6a86b7c5196f1e8e44de7e4f4716707af48367e3746e960bf0099c8fdf
- SHA512
  
  051a23653fbae90df49e28f8a059eee681e7c19ae33df3be865929332a84a14ed198979fbbcaa410cfa78900f8384bb8a0dbf40fc873ffe8c0f703c0738208e4
- SSDEEP
  
  98304:gCQUA1OjhJTlBR1AebLrfjBevMu9Rqxkgn6lnwOmQvcQunlmoixgeXueb1:gCPhh1RrbLrfjBYRFbnR1EQunlmokgeb
Score

9^/10

upx defense_evasion execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

behavioral2

defense_evasionexecutionimpactransomwareupx

© 2018-2025

Terms | Privacy