Overview

overview

7

Static

static

5

2024-11-02...er.exe

windows7-x64

7

2024-11-02...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-02_0bc181b8a6f50a6cd5cede6ea94b6234_cryptolocker

  • Size

    64KB

  • Sample

    241102-g6ecfazejf

  • MD5

    0bc181b8a6f50a6cd5cede6ea94b6234

  • SHA1

    1886990d536597fa88cffe84065953608c2864ef

  • SHA256

    1475d2c078e49a04b7c33b06aca15a866a5f976856ba8d8c3e5007973532b44f

  • SHA512

    f878d48845e60c69aad1d53e7026664404640aa995d1115c9939dffd08e6c71401aa9e1302ca228375289ce92754e68bfcfbebcae0f078502b8caaa91f454a48

  • SSDEEP

    768:0Qz7yVEhs9+syJP6ntOOtEvwDpjFSXOQ69zbjlAAX5e9zag4:0j+soPSMOtEvwDpjwizbR9Xwzag4

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-11-02_0bc181b8a6f50a6cd5cede6ea94b6234_cryptolocker

    • Size

      64KB

    • MD5

      0bc181b8a6f50a6cd5cede6ea94b6234

    • SHA1

      1886990d536597fa88cffe84065953608c2864ef

    • SHA256

      1475d2c078e49a04b7c33b06aca15a866a5f976856ba8d8c3e5007973532b44f

    • SHA512

      f878d48845e60c69aad1d53e7026664404640aa995d1115c9939dffd08e6c71401aa9e1302ca228375289ce92754e68bfcfbebcae0f078502b8caaa91f454a48

    • SSDEEP

      768:0Qz7yVEhs9+syJP6ntOOtEvwDpjFSXOQ69zbjlAAX5e9zag4:0j+soPSMOtEvwDpjwizbR9Xwzag4

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks