Overview

overview

10

Static

static

10

2024-05-01...er.exe

windows7-x64

9

2024-05-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-01_82eade481f1647cc2e10ff049da74d36_cryptolocker

  • Size

    39KB

  • Sample

    240501-yza5wafd91

  • MD5

    82eade481f1647cc2e10ff049da74d36

  • SHA1

    416f5f3d2d2842c4f6261fedc8799b644153651c

  • SHA256

    27119c932f61ad1f9a88db83a4075098f86f2b7a9c265778748109ce6e9d485a

  • SHA512

    788d1255cc79771ec98fe10a74aa2671dff862f25ebcf4874b849c6a8640d8aec4632a6b0c52ceb85e18a4b208c293d0cd17a16e93096cef8335f40e0727f2b2

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBH:qDdFJy3QMOtEvwDpjjWMl7TdB

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-01_82eade481f1647cc2e10ff049da74d36_cryptolocker

    • Size

      39KB

    • MD5

      82eade481f1647cc2e10ff049da74d36

    • SHA1

      416f5f3d2d2842c4f6261fedc8799b644153651c

    • SHA256

      27119c932f61ad1f9a88db83a4075098f86f2b7a9c265778748109ce6e9d485a

    • SHA512

      788d1255cc79771ec98fe10a74aa2671dff862f25ebcf4874b849c6a8640d8aec4632a6b0c52ceb85e18a4b208c293d0cd17a16e93096cef8335f40e0727f2b2

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBH:qDdFJy3QMOtEvwDpjjWMl7TdB

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks