Overview

overview

7

Static

static

7

2024-09-08...er.exe

windows7-x64

7

2024-09-08...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-08_771c7db44792debb4756bd8b92c11b5e_cryptolocker

  • Size

    37KB

  • Sample

    240908-xp69ws1enp

  • MD5

    771c7db44792debb4756bd8b92c11b5e

  • SHA1

    2c973e71df36f812ee9bab6da285701beab7cf6e

  • SHA256

    64fe1ec20cac0633d6954db979b606e37d89fee03f31276f72000c98862ca104

  • SHA512

    6015ac1198a4b8d650680b85d152ff3fc1e662f477100ca95b7245ab0593abf7f9dc37d5b2364d2fa8a98e77d00fe6f73d83e5e4c28ac8cded80f262b35981ee

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITw:qDdFJy3QMOtEvwDpjjWMl7Tw

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-09-08_771c7db44792debb4756bd8b92c11b5e_cryptolocker

    • Size

      37KB

    • MD5

      771c7db44792debb4756bd8b92c11b5e

    • SHA1

      2c973e71df36f812ee9bab6da285701beab7cf6e

    • SHA256

      64fe1ec20cac0633d6954db979b606e37d89fee03f31276f72000c98862ca104

    • SHA512

      6015ac1198a4b8d650680b85d152ff3fc1e662f477100ca95b7245ab0593abf7f9dc37d5b2364d2fa8a98e77d00fe6f73d83e5e4c28ac8cded80f262b35981ee

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITw:qDdFJy3QMOtEvwDpjjWMl7Tw

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks