Overview

overview

9

Static

static

5

b2b3338d57...cN.exe

windows7-x64

9

b2b3338d57...cN.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2b3338d57131f6e0a5c1c84d44b899801c950ab586ee133f67e12ad0ad20f2cN

  • Size

    50KB

  • Sample

    240927-slphfs1cmg

  • MD5

    076d29207574ecaf7a9da2f45832d450

  • SHA1

    e26cbf8db2d8bdf79bb1c581454d1e59a8bd04d7

  • SHA256

    b2b3338d57131f6e0a5c1c84d44b899801c950ab586ee133f67e12ad0ad20f2c

  • SHA512

    7f5b23f04e1e40e2c12efdb7cdc00ede94af8dc6158043af63b39d4b3943d896f766de26c87173eca891f06016c25848738574e723134ca8782237e731ff0eca

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9SBT37CPKKdJJ1EXBwzEXBwdcMcI92:CTW7JJ7T6TW7JJ7Tk

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b2b3338d57131f6e0a5c1c84d44b899801c950ab586ee133f67e12ad0ad20f2cN

    • Size

      50KB

    • MD5

      076d29207574ecaf7a9da2f45832d450

    • SHA1

      e26cbf8db2d8bdf79bb1c581454d1e59a8bd04d7

    • SHA256

      b2b3338d57131f6e0a5c1c84d44b899801c950ab586ee133f67e12ad0ad20f2c

    • SHA512

      7f5b23f04e1e40e2c12efdb7cdc00ede94af8dc6158043af63b39d4b3943d896f766de26c87173eca891f06016c25848738574e723134ca8782237e731ff0eca

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9SBT37CPKKdJJ1EXBwzEXBwdcMcI92:CTW7JJ7T6TW7JJ7Tk

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (489) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks