Overview

overview

9

Static

static

7

ed58a0752b...cN.exe

windows7-x64

9

ed58a0752b...cN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed58a0752b5bb782583473f1185372025751dcde082e26349dd0974f018b568cN

  • Size

    59KB

  • Sample

    240919-fe7n8ssamq

  • MD5

    707045f6eded39cdbb77780df4225360

  • SHA1

    b8575ad4dbd8400d3f6a3f2f13928b9fbeb536f8

  • SHA256

    ed58a0752b5bb782583473f1185372025751dcde082e26349dd0974f018b568c

  • SHA512

    abc00cd31542296e2823ead83b31e32c006ccde9486534cd61071f0c9763c2d3effbf908a4138c0a27f58aa1e9e33be62338270542cf81dd73f1a71068d3b7ba

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dGJSjJSSSAJx4AJxVSAJx4AJxPBT37CPKKd/:CTW7JJ7TmJSjJSETW7JJ7TmJSjJSO6C

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      ed58a0752b5bb782583473f1185372025751dcde082e26349dd0974f018b568cN

    • Size

      59KB

    • MD5

      707045f6eded39cdbb77780df4225360

    • SHA1

      b8575ad4dbd8400d3f6a3f2f13928b9fbeb536f8

    • SHA256

      ed58a0752b5bb782583473f1185372025751dcde082e26349dd0974f018b568c

    • SHA512

      abc00cd31542296e2823ead83b31e32c006ccde9486534cd61071f0c9763c2d3effbf908a4138c0a27f58aa1e9e33be62338270542cf81dd73f1a71068d3b7ba

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dGJSjJSSSAJx4AJxVSAJx4AJxPBT37CPKKd/:CTW7JJ7TmJSjJSETW7JJ7TmJSjJSO6C

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (403) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks