Overview

overview

7

Static

static

5

2024-11-02...er.exe

windows7-x64

7

2024-11-02...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-02_0a89c7901edc3b5c6a43f680b04e1f5b_cryptolocker

  • Size

    62KB

  • Sample

    241102-g57bts1pen

  • MD5

    0a89c7901edc3b5c6a43f680b04e1f5b

  • SHA1

    ccfc63505a5f1aed1ed4bc486178b005bf98fc8c

  • SHA256

    5c2f8e0e9737c115a6ef44e034cfbf6db6792bf34ec8d5e40dbc03417093f8c2

  • SHA512

    dc5a0c72f456e30b139d5ee41fd9ebd5fa6f1709972bf2694e30b5290d2eb4f98f236d23c616b3a73aa0dbc9c7c0660ac16643a17b728cf496b2e55a0e78f2a9

  • SSDEEP

    768:f6LsoEEeegiZPvEhHSG+gz5NQXtckstOOtEvwDpj/WaD3TUogs/VXpAPWRi6:f6QFElP6n+g9u9cvMOtEvwDpjnpVXzR3

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-11-02_0a89c7901edc3b5c6a43f680b04e1f5b_cryptolocker

    • Size

      62KB

    • MD5

      0a89c7901edc3b5c6a43f680b04e1f5b

    • SHA1

      ccfc63505a5f1aed1ed4bc486178b005bf98fc8c

    • SHA256

      5c2f8e0e9737c115a6ef44e034cfbf6db6792bf34ec8d5e40dbc03417093f8c2

    • SHA512

      dc5a0c72f456e30b139d5ee41fd9ebd5fa6f1709972bf2694e30b5290d2eb4f98f236d23c616b3a73aa0dbc9c7c0660ac16643a17b728cf496b2e55a0e78f2a9

    • SSDEEP

      768:f6LsoEEeegiZPvEhHSG+gz5NQXtckstOOtEvwDpj/WaD3TUogs/VXpAPWRi6:f6QFElP6n+g9u9cvMOtEvwDpjnpVXzR3

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks