Overview

overview

9

Static

static

5

627a520da6...0N.exe

windows7-x64

9

627a520da6...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    627a520da64557eb3c206b81559b62cf75a72da2d2d2bc50a0d713a89cdd9f30N

  • Size

    79KB

  • Sample

    241003-3k47masfnk

  • MD5

    4520d88eb591078a922b5566761ca8e0

  • SHA1

    3ae27fa1ae55e0bff97921cd2accb7a1d92f4735

  • SHA256

    627a520da64557eb3c206b81559b62cf75a72da2d2d2bc50a0d713a89cdd9f30

  • SHA512

    7e6dd472c8f8fbb6b18dbb9e649b2e972040c70fc4b2d48515b74ac59188f480c1659f1828b03c2a9ccae8f70332d6e33fd62c1dd7acdd353bcc67791260d93b

  • SSDEEP

    1536:CTW7JJZENTBAOIfmKJfmKtTW7JJZENTBAOIfmKJfmK6:htE7tEf

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      627a520da64557eb3c206b81559b62cf75a72da2d2d2bc50a0d713a89cdd9f30N

    • Size

      79KB

    • MD5

      4520d88eb591078a922b5566761ca8e0

    • SHA1

      3ae27fa1ae55e0bff97921cd2accb7a1d92f4735

    • SHA256

      627a520da64557eb3c206b81559b62cf75a72da2d2d2bc50a0d713a89cdd9f30

    • SHA512

      7e6dd472c8f8fbb6b18dbb9e649b2e972040c70fc4b2d48515b74ac59188f480c1659f1828b03c2a9ccae8f70332d6e33fd62c1dd7acdd353bcc67791260d93b

    • SSDEEP

      1536:CTW7JJZENTBAOIfmKJfmKtTW7JJZENTBAOIfmKJfmK6:htE7tEf

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3900) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks