Overview

overview

9

Static

static

5

2e5a45ed43...13.exe

windows7-x64

9

2e5a45ed43...13.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e5a45ed4358e73b8d87a5762d4f39f26dad4f0fed64de648b9a8a9c4a73b913

  • Size

    2.4MB

  • Sample

    240930-xt7ffsvclg

  • MD5

    957ce4e793a1e90fea00021e6b1ee3f6

  • SHA1

    3872baf0a775c06870bd32ddd92a3923a093bab1

  • SHA256

    2e5a45ed4358e73b8d87a5762d4f39f26dad4f0fed64de648b9a8a9c4a73b913

  • SHA512

    ba2495187677a502ed9c87be75dc13f5841c44f8a9b32864665d89d875205001a1f5a59010d325ca5359b6f58a7b577d093b9f2a45f839fef8e248b09b036a78

  • SSDEEP

    49152:WGlWC3YlQtHJ0VQ7VAG1FsmcsTKvA9OOG02Q:IQRv5A6

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2e5a45ed4358e73b8d87a5762d4f39f26dad4f0fed64de648b9a8a9c4a73b913

    • Size

      2.4MB

    • MD5

      957ce4e793a1e90fea00021e6b1ee3f6

    • SHA1

      3872baf0a775c06870bd32ddd92a3923a093bab1

    • SHA256

      2e5a45ed4358e73b8d87a5762d4f39f26dad4f0fed64de648b9a8a9c4a73b913

    • SHA512

      ba2495187677a502ed9c87be75dc13f5841c44f8a9b32864665d89d875205001a1f5a59010d325ca5359b6f58a7b577d093b9f2a45f839fef8e248b09b036a78

    • SSDEEP

      49152:WGlWC3YlQtHJ0VQ7VAG1FsmcsTKvA9OOG02Q:IQRv5A6

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (808) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks