Overview

overview

9

Static

static

5

34b15004ff...13.exe

windows7-x64

9

34b15004ff...13.exe

windows10-2004-x64

9

Resubmissions

12/10/2024, 20:42

241012-zg5r7szgkg 9

12/10/2024, 20:37

241012-zd8dxszerc 9

Sharing

Copy URL Twitter E-mail

General

  • Target

    34b15004ffc46d54037e4f62884d83697d9d122a649c277a8255efe24f202613

  • Size

    147KB

  • Sample

    241012-zd8dxszerc

  • MD5

    cf6c359fa5baf71f9dba01c00f1153c9

  • SHA1

    885687fe912b792bb3ee00384c2768113fe1868a

  • SHA256

    34b15004ffc46d54037e4f62884d83697d9d122a649c277a8255efe24f202613

  • SHA512

    99b562a5e4a22f8d3ba81002a7e1c3b986b64881ddde5e09a5ac1b181ed0fe7b737344792ecac2829e222712d2e37dc91751abef2aeda9d746a8879889a038b0

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY51lnlDTWn1++PJHJXA/OsIZfzc3/Q8zxY514:KQSox51F5QSox51Fu

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      34b15004ffc46d54037e4f62884d83697d9d122a649c277a8255efe24f202613

    • Size

      147KB

    • MD5

      cf6c359fa5baf71f9dba01c00f1153c9

    • SHA1

      885687fe912b792bb3ee00384c2768113fe1868a

    • SHA256

      34b15004ffc46d54037e4f62884d83697d9d122a649c277a8255efe24f202613

    • SHA512

      99b562a5e4a22f8d3ba81002a7e1c3b986b64881ddde5e09a5ac1b181ed0fe7b737344792ecac2829e222712d2e37dc91751abef2aeda9d746a8879889a038b0

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY51lnlDTWn1++PJHJXA/OsIZfzc3/Q8zxY514:KQSox51F5QSox51Fu

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4029) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks