Overview

overview

9

Static

static

5

0eee06df1c...4N.exe

windows7-x64

9

0eee06df1c...4N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0eee06df1c9cc866a4b6add23cb21da2159a2ee56e2930fca057006e62778ec4N

  • Size

    86KB

  • Sample

    241006-ksanwawfrj

  • MD5

    ae5830d89b0163e506a74f6aae088af0

  • SHA1

    32caa244ebd6ba13ef23170de84326fd0d9375df

  • SHA256

    0eee06df1c9cc866a4b6add23cb21da2159a2ee56e2930fca057006e62778ec4

  • SHA512

    b2fe3f0756adbe236f223f7988892b328389a67dbd69203ee1e0f22be687919540b6c600fc74bd338da2af281caa852a1c9ba47a1d76f99b9cae930739c23ad5

  • SSDEEP

    1536:CTW7JJZENTNyoKIKM99D9ATW7JJZENTNyoKIKM99D9dfl:htE5KIKutE5KIKefl

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      0eee06df1c9cc866a4b6add23cb21da2159a2ee56e2930fca057006e62778ec4N

    • Size

      86KB

    • MD5

      ae5830d89b0163e506a74f6aae088af0

    • SHA1

      32caa244ebd6ba13ef23170de84326fd0d9375df

    • SHA256

      0eee06df1c9cc866a4b6add23cb21da2159a2ee56e2930fca057006e62778ec4

    • SHA512

      b2fe3f0756adbe236f223f7988892b328389a67dbd69203ee1e0f22be687919540b6c600fc74bd338da2af281caa852a1c9ba47a1d76f99b9cae930739c23ad5

    • SSDEEP

      1536:CTW7JJZENTNyoKIKM99D9ATW7JJZENTNyoKIKM99D9dfl:htE5KIKutE5KIKefl

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4377) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks