Overview

overview

10

Static

static

10

2024-05-02...er.exe

windows7-x64

9

2024-05-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-02_d17a004e8e71293bb1b62009372aec4b_cryptolocker

  • Size

    32KB

  • Sample

    240502-bh26psce51

  • MD5

    d17a004e8e71293bb1b62009372aec4b

  • SHA1

    a4b729d22023c085731e0e5eeda230c446c911ce

  • SHA256

    d664dba3b79d06c9a4f4b4d835f7778e1103ad2778dae5e3b782411f950fca8f

  • SHA512

    14687c0bc78b72d837410e282354b1068f115a256c920b719411250feef0510169d232a8752ea05b614794c0b4d4dae91d5cb713ccd6f72e5d1a4bf5b8bf594e

  • SSDEEP

    768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtXs:bFPmpiif/oc+vXs

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-02_d17a004e8e71293bb1b62009372aec4b_cryptolocker

    • Size

      32KB

    • MD5

      d17a004e8e71293bb1b62009372aec4b

    • SHA1

      a4b729d22023c085731e0e5eeda230c446c911ce

    • SHA256

      d664dba3b79d06c9a4f4b4d835f7778e1103ad2778dae5e3b782411f950fca8f

    • SHA512

      14687c0bc78b72d837410e282354b1068f115a256c920b719411250feef0510169d232a8752ea05b614794c0b4d4dae91d5cb713ccd6f72e5d1a4bf5b8bf594e

    • SSDEEP

      768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtXs:bFPmpiif/oc+vXs

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks