Overview

overview

10

Static

static

10

2024-05-02...er.exe

windows7-x64

9

2024-05-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-02_40235881e44ee15700f6f5ca129e95ff_cryptolocker

  • Size

    71KB

  • Sample

    240502-azdn1adh73

  • MD5

    40235881e44ee15700f6f5ca129e95ff

  • SHA1

    42a3b5130f5ef7f20514efd4075ca78e72c30d41

  • SHA256

    e72214ad43d569868245c1c199e75610f1ec6b558f83812aa8419439ab8f1e79

  • SHA512

    c5c75a81f87d7883cb4230528f5d651040a544e0c535ec346aed0635b6edc7a4adebd8d275dbb35a9aff73639d366bcd664837ec41b2f6103fd0e2aba6ad1aa9

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs94:C4Q2c94OtEvwDpj4H8zh

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-02_40235881e44ee15700f6f5ca129e95ff_cryptolocker

    • Size

      71KB

    • MD5

      40235881e44ee15700f6f5ca129e95ff

    • SHA1

      42a3b5130f5ef7f20514efd4075ca78e72c30d41

    • SHA256

      e72214ad43d569868245c1c199e75610f1ec6b558f83812aa8419439ab8f1e79

    • SHA512

      c5c75a81f87d7883cb4230528f5d651040a544e0c535ec346aed0635b6edc7a4adebd8d275dbb35a9aff73639d366bcd664837ec41b2f6103fd0e2aba6ad1aa9

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs94:C4Q2c94OtEvwDpj4H8zh

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks