Overview

overview

7

Static

static

7

2024-09-11...er.exe

windows7-x64

7

2024-09-11...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-11_b00d3ab33831c95ffeb8ac4556a26d47_cryptolocker

  • Size

    90KB

  • Sample

    240911-pq2f2a1ckf

  • MD5

    b00d3ab33831c95ffeb8ac4556a26d47

  • SHA1

    c20a1e39c5d49ee70c1d5baa2f7f772b5329a679

  • SHA256

    e52c7fa782f4eeae06b0d979cdfa480c4d4b673e8a5ede84c99ea5e3db10170d

  • SHA512

    fa066af626b3f551d82d39d5a568d6141e50d7f33c29427be94ef333bc1ff409086d63870bfdd57de82c0cea434394ff1f5b239a79e267e89f1e8ec53675ef53

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODwq9:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgj

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-09-11_b00d3ab33831c95ffeb8ac4556a26d47_cryptolocker

    • Size

      90KB

    • MD5

      b00d3ab33831c95ffeb8ac4556a26d47

    • SHA1

      c20a1e39c5d49ee70c1d5baa2f7f772b5329a679

    • SHA256

      e52c7fa782f4eeae06b0d979cdfa480c4d4b673e8a5ede84c99ea5e3db10170d

    • SHA512

      fa066af626b3f551d82d39d5a568d6141e50d7f33c29427be94ef333bc1ff409086d63870bfdd57de82c0cea434394ff1f5b239a79e267e89f1e8ec53675ef53

    • SSDEEP

      768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODwq9:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgj

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks