Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_83474f16e0e0c010d2edddc491653816_cryptolocker

  • Size

    66KB

  • Sample

    240214-ekx7bahf66

  • MD5

    83474f16e0e0c010d2edddc491653816

  • SHA1

    e3549503eed9c5169e4f35f401a83e54359758e6

  • SHA256

    434c91d4b6f83ec7985b405c685241fcf4a419a6effccb0c9188ac0e2ac17803

  • SHA512

    770e0e98355ba101114cb21182d64b2ce6e95d79e4e5e396dc9bd9cd0bd182b1973e89eec9e03e83d98c718556f06cd5aa69a9a939ef6186cbe33af8049440f7

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UAXa7O:1nK6a+qdOOtEvwDpj5

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-14_83474f16e0e0c010d2edddc491653816_cryptolocker

    • Size

      66KB

    • MD5

      83474f16e0e0c010d2edddc491653816

    • SHA1

      e3549503eed9c5169e4f35f401a83e54359758e6

    • SHA256

      434c91d4b6f83ec7985b405c685241fcf4a419a6effccb0c9188ac0e2ac17803

    • SHA512

      770e0e98355ba101114cb21182d64b2ce6e95d79e4e5e396dc9bd9cd0bd182b1973e89eec9e03e83d98c718556f06cd5aa69a9a939ef6186cbe33af8049440f7

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UAXa7O:1nK6a+qdOOtEvwDpj5

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks