Overview

overview

7

Static

static

5

2024-11-20...er.exe

windows7-x64

7

2024-11-20...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-20_289292741b0612a5b2117133163f7ba3_cryptolocker

  • Size

    40KB

  • Sample

    241120-dx3f5azhnm

  • MD5

    289292741b0612a5b2117133163f7ba3

  • SHA1

    eb5fa8b7da0e019ba893a6f7cece0d116b0cbf10

  • SHA256

    97931054a7b5f33806164726509c4c989fb1eb0710733008b41ba2153c4e64f5

  • SHA512

    668ededce0d96db33ce23e70e656f3e72c15f16e460faba54dddde4193e19073436b4b8fe60ef97025083b7afca3de5278e934bf57ce30f34d1d4018d7751dd4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDNHX:qDdFJy3QMOtEvwDpjjWMl7TdV3

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-11-20_289292741b0612a5b2117133163f7ba3_cryptolocker

    • Size

      40KB

    • MD5

      289292741b0612a5b2117133163f7ba3

    • SHA1

      eb5fa8b7da0e019ba893a6f7cece0d116b0cbf10

    • SHA256

      97931054a7b5f33806164726509c4c989fb1eb0710733008b41ba2153c4e64f5

    • SHA512

      668ededce0d96db33ce23e70e656f3e72c15f16e460faba54dddde4193e19073436b4b8fe60ef97025083b7afca3de5278e934bf57ce30f34d1d4018d7751dd4

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDNHX:qDdFJy3QMOtEvwDpjjWMl7TdV3

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks