Overview

overview

9

Static

static

5

43840830cd...bN.exe

windows7-x64

9

43840830cd...bN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43840830cd547e5d000e74f797ba987830a769ec18629cb7914d4e1f087865ebN

  • Size

    63KB

  • Sample

    240928-c1lgcavdpc

  • MD5

    23850794520daef128cfa22bc4c78020

  • SHA1

    3398747eee71caec2650a23e1a8a0a6eb9cad12b

  • SHA256

    43840830cd547e5d000e74f797ba987830a769ec18629cb7914d4e1f087865eb

  • SHA512

    18b87d73a29fd2452c1c1d73bccedd9844a214acfac5fc6e1c76c4aa34c6089016c63ef758fe7b851a8c11e3b1744425dc9e4ee694f46be4030c99e9a4f37d67

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJ8BT37CPKKdJJ1EXBwzEC:CTW7JJ7TPUtTW7JJ7TPU6

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      43840830cd547e5d000e74f797ba987830a769ec18629cb7914d4e1f087865ebN

    • Size

      63KB

    • MD5

      23850794520daef128cfa22bc4c78020

    • SHA1

      3398747eee71caec2650a23e1a8a0a6eb9cad12b

    • SHA256

      43840830cd547e5d000e74f797ba987830a769ec18629cb7914d4e1f087865eb

    • SHA512

      18b87d73a29fd2452c1c1d73bccedd9844a214acfac5fc6e1c76c4aa34c6089016c63ef758fe7b851a8c11e3b1744425dc9e4ee694f46be4030c99e9a4f37d67

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJ8BT37CPKKdJJ1EXBwzEC:CTW7JJ7TPUtTW7JJ7TPU6

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3673) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks