Overview

overview

7

Static

static

5

2024-10-31...er.exe

windows7-x64

7

2024-10-31...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-31_a5933583b59085fea46a3f1b39644156_cryptolocker

  • Size

    69KB

  • Sample

    241031-kdrc3ssres

  • MD5

    a5933583b59085fea46a3f1b39644156

  • SHA1

    028fbeb42c3b2a9cbd8951ae0d5e24de2f74bf5a

  • SHA256

    271fa4a425ea28bfd8cd812bec0daf34de4ba4c0c2a8c7387ae2a7975a640b79

  • SHA512

    0ceb2dcae2ad5e0ae39ead37094508aaffdeaabc591f5397a0eec6888d118be0b6a6a20b33f5322dd875f8fee4470bf5d2942e19025b93d6002c0af324a7df69

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRw:1nK6a+qdOOtEvwDpj9

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-10-31_a5933583b59085fea46a3f1b39644156_cryptolocker

    • Size

      69KB

    • MD5

      a5933583b59085fea46a3f1b39644156

    • SHA1

      028fbeb42c3b2a9cbd8951ae0d5e24de2f74bf5a

    • SHA256

      271fa4a425ea28bfd8cd812bec0daf34de4ba4c0c2a8c7387ae2a7975a640b79

    • SHA512

      0ceb2dcae2ad5e0ae39ead37094508aaffdeaabc591f5397a0eec6888d118be0b6a6a20b33f5322dd875f8fee4470bf5d2942e19025b93d6002c0af324a7df69

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRw:1nK6a+qdOOtEvwDpj9

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks