Overview

overview

9

Static

static

5

fab3035d8c...7N.exe

windows7-x64

9

fab3035d8c...7N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fab3035d8cc79fbe1e9590e879eb4831cf945bab43930d760f998a563321f497N

  • Size

    129KB

  • Sample

    241014-g4jt5s1cph

  • MD5

    5976ce3fc770ae382643930ac157cfc0

  • SHA1

    12e33df27e702d6ede8e438d164d2105eacf290b

  • SHA256

    fab3035d8cc79fbe1e9590e879eb4831cf945bab43930d760f998a563321f497

  • SHA512

    1ffcdc93be5a4c0446988b6b690c9c712af11239f01929878e11056b941344e9876342502fb984fe943645f0c5483505401cf8913fa167d045a59e0aa38f45c2

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5KwfTWn1++PJHJXA/OsIZfzc3/Q8zxY5KwYN:KQSox5KwrQSox5Kww

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      fab3035d8cc79fbe1e9590e879eb4831cf945bab43930d760f998a563321f497N

    • Size

      129KB

    • MD5

      5976ce3fc770ae382643930ac157cfc0

    • SHA1

      12e33df27e702d6ede8e438d164d2105eacf290b

    • SHA256

      fab3035d8cc79fbe1e9590e879eb4831cf945bab43930d760f998a563321f497

    • SHA512

      1ffcdc93be5a4c0446988b6b690c9c712af11239f01929878e11056b941344e9876342502fb984fe943645f0c5483505401cf8913fa167d045a59e0aa38f45c2

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5KwfTWn1++PJHJXA/OsIZfzc3/Q8zxY5KwYN:KQSox5KwrQSox5Kww

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4402) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks