Overview

overview

7

Static

static

5

2024-11-02...er.exe

windows7-x64

7

2024-11-02...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-02_00e9b13adff8467426902b4d1e02ec65_cryptolocker

  • Size

    82KB

  • Sample

    241102-g4z65azdrb

  • MD5

    00e9b13adff8467426902b4d1e02ec65

  • SHA1

    7d8a324c087379893b7cda7aa8b50f603f669d39

  • SHA256

    a7dd4958fd68090756ef201cbf11c2c4709cc24729332fe1e12c2befabcda22e

  • SHA512

    bcf8ef30280bf04e99be11a43225942f8fcea334645ced9fc64b4e68cc6db0b3cce9c70cbdc5ee33910da30f1a87ede138a9bca8344365025f3b2ab90958c61d

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalvE:1nK6a+qdOOtEvwDpjyE

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-11-02_00e9b13adff8467426902b4d1e02ec65_cryptolocker

    • Size

      82KB

    • MD5

      00e9b13adff8467426902b4d1e02ec65

    • SHA1

      7d8a324c087379893b7cda7aa8b50f603f669d39

    • SHA256

      a7dd4958fd68090756ef201cbf11c2c4709cc24729332fe1e12c2befabcda22e

    • SHA512

      bcf8ef30280bf04e99be11a43225942f8fcea334645ced9fc64b4e68cc6db0b3cce9c70cbdc5ee33910da30f1a87ede138a9bca8344365025f3b2ab90958c61d

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalvE:1nK6a+qdOOtEvwDpjyE

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks