Overview

overview

9

Static

static

7

7e1de3cc1e...cN.exe

windows7-x64

9

7e1de3cc1e...cN.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e1de3cc1ecf9d989cedaa3480b8230afe28714b24bf4f2d7c3b2f74d9df708cN

  • Size

    49KB

  • Sample

    240921-bavfwsxfmn

  • MD5

    fe77cf25c4e260d4ec82163cf5865640

  • SHA1

    884d46e05768ddfe7a8b31e9ce71f5707dbd63e0

  • SHA256

    7e1de3cc1ecf9d989cedaa3480b8230afe28714b24bf4f2d7c3b2f74d9df708c

  • SHA512

    1b60688e4199a946a4da76e34d6afaf4fc5ba37527b45a6db2a9c5add8006194885cfc81ca14fd48baa91f86613816e79c7fc870f7f1964145dd8faf18188b05

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9KlBBT37CPKKdJJ1EXBwzEXBwdcMcI9KlK:CTW7JJ7TMTW7JJ7T1

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      7e1de3cc1ecf9d989cedaa3480b8230afe28714b24bf4f2d7c3b2f74d9df708cN

    • Size

      49KB

    • MD5

      fe77cf25c4e260d4ec82163cf5865640

    • SHA1

      884d46e05768ddfe7a8b31e9ce71f5707dbd63e0

    • SHA256

      7e1de3cc1ecf9d989cedaa3480b8230afe28714b24bf4f2d7c3b2f74d9df708c

    • SHA512

      1b60688e4199a946a4da76e34d6afaf4fc5ba37527b45a6db2a9c5add8006194885cfc81ca14fd48baa91f86613816e79c7fc870f7f1964145dd8faf18188b05

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9KlBBT37CPKKdJJ1EXBwzEXBwdcMcI9KlK:CTW7JJ7TMTW7JJ7T1

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3875) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks