Overview

overview

7

Static

static

5

2024-11-20...er.exe

windows7-x64

7

2024-11-20...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-20_ed554618ea79aac7ee409d66bf98b3c9_cryptolocker

  • Size

    36KB

  • Sample

    241120-d8ejfazdjb

  • MD5

    ed554618ea79aac7ee409d66bf98b3c9

  • SHA1

    2fd69a212e6cdde49f7538b4306b318a57324498

  • SHA256

    b7b07e4942f4bc4ddfc5ef81b81fbe178b735fc4786e06f73ef90270b64b8f8e

  • SHA512

    2f45e6c6f65a22595eb4c3767ba686717b15b6e157794547f57f7acc0b2535498c3b8a6ceb3415ea8975eeaa9a2f9fd6b3183a6e619a23b2b954cbd926731137

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITr:qDdFJy3QMOtEvwDpjjWMl7Tr

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-11-20_ed554618ea79aac7ee409d66bf98b3c9_cryptolocker

    • Size

      36KB

    • MD5

      ed554618ea79aac7ee409d66bf98b3c9

    • SHA1

      2fd69a212e6cdde49f7538b4306b318a57324498

    • SHA256

      b7b07e4942f4bc4ddfc5ef81b81fbe178b735fc4786e06f73ef90270b64b8f8e

    • SHA512

      2f45e6c6f65a22595eb4c3767ba686717b15b6e157794547f57f7acc0b2535498c3b8a6ceb3415ea8975eeaa9a2f9fd6b3183a6e619a23b2b954cbd926731137

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITr:qDdFJy3QMOtEvwDpjjWMl7Tr

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks