Overview

overview

7

Static

static

7

2024-09-18...er.exe

windows7-x64

7

2024-09-18...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-18_0a241c86b458ca6c2fc4e4be2e47508d_cryptolocker

  • Size

    40KB

  • Sample

    240918-ygncgszemd

  • MD5

    0a241c86b458ca6c2fc4e4be2e47508d

  • SHA1

    05e8ed73bc4c6f78cfc1261758727bfa97b988fd

  • SHA256

    3e7e9ba92ca489b417a9dfb51e6a2ea64edb9fd73b0a81cbd4f3a0895e7e0d53

  • SHA512

    7b0ad5823b45d7b10c45f9a22f4dc09054655981723cfdaa762b6a0ee876e7548f9ce4071231914284bd67ca8c76eab85a9da3f58d8de2926dd4dc639aaec3a7

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB0j:qDdFJy3QMOtEvwDpjjWMl7Td8

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-09-18_0a241c86b458ca6c2fc4e4be2e47508d_cryptolocker

    • Size

      40KB

    • MD5

      0a241c86b458ca6c2fc4e4be2e47508d

    • SHA1

      05e8ed73bc4c6f78cfc1261758727bfa97b988fd

    • SHA256

      3e7e9ba92ca489b417a9dfb51e6a2ea64edb9fd73b0a81cbd4f3a0895e7e0d53

    • SHA512

      7b0ad5823b45d7b10c45f9a22f4dc09054655981723cfdaa762b6a0ee876e7548f9ce4071231914284bd67ca8c76eab85a9da3f58d8de2926dd4dc639aaec3a7

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB0j:qDdFJy3QMOtEvwDpjjWMl7Td8

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks