Overview

overview

10

Static

static

10

2024-04-30...er.exe

windows7-x64

9

2024-04-30...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-30_6725112704c5d2eac989fd6e7de91615_cryptolocker

  • Size

    23KB

  • Sample

    240430-flgfmadd8w

  • MD5

    6725112704c5d2eac989fd6e7de91615

  • SHA1

    17d81ceff555b031d1c412c20f0338738265ac40

  • SHA256

    ef0a0b5055d2b90a53cf34b2b60015be4fc29b2c0e114ef00a138da4a7f93702

  • SHA512

    d3b249ead3cc71c972ec164dced82b9044aeccf63c9900f019c67c523b8c0534489efb3b605217591bd50f06cf0c124f57030acf0d78fc819d411306744f6c33

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6Hjn:bVCPwFRo6CpwXFXSqQXfjA7

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-30_6725112704c5d2eac989fd6e7de91615_cryptolocker

    • Size

      23KB

    • MD5

      6725112704c5d2eac989fd6e7de91615

    • SHA1

      17d81ceff555b031d1c412c20f0338738265ac40

    • SHA256

      ef0a0b5055d2b90a53cf34b2b60015be4fc29b2c0e114ef00a138da4a7f93702

    • SHA512

      d3b249ead3cc71c972ec164dced82b9044aeccf63c9900f019c67c523b8c0534489efb3b605217591bd50f06cf0c124f57030acf0d78fc819d411306744f6c33

    • SSDEEP

      384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6Hjn:bVCPwFRo6CpwXFXSqQXfjA7

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks