Overview

overview

7

Static

static

5

2024-10-17...er.exe

windows7-x64

7

2024-10-17...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-17_101716f85836618979a0b5ab58cd1f7d_cryptolocker

  • Size

    40KB

  • Sample

    241017-xdhr6azaqb

  • MD5

    101716f85836618979a0b5ab58cd1f7d

  • SHA1

    ca78a8886083ad2ed3e368ae325dbdd02a2dc8e8

  • SHA256

    5363e30d18c5b3f0888763ce048fe62fac28d708680e02f4e0b0ae2a6c8d9670

  • SHA512

    8309a6ab2e69772eb10e028a06a68cfcfe838a8729af615a397e9589d94b1501dcf34b6ec082a9c13ad3a6494f8dab98e3843b7db84ecdca8cf3129476933799

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB7:qDdFJy3QMOtEvwDpjjWMl7Tdt

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-10-17_101716f85836618979a0b5ab58cd1f7d_cryptolocker

    • Size

      40KB

    • MD5

      101716f85836618979a0b5ab58cd1f7d

    • SHA1

      ca78a8886083ad2ed3e368ae325dbdd02a2dc8e8

    • SHA256

      5363e30d18c5b3f0888763ce048fe62fac28d708680e02f4e0b0ae2a6c8d9670

    • SHA512

      8309a6ab2e69772eb10e028a06a68cfcfe838a8729af615a397e9589d94b1501dcf34b6ec082a9c13ad3a6494f8dab98e3843b7db84ecdca8cf3129476933799

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB7:qDdFJy3QMOtEvwDpjjWMl7Tdt

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks