Overview

overview

10

Static

static

10

2024-05-04...er.exe

windows7-x64

9

2024-05-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-04_1ed1bf0f48b6d4b998ee153e2c766e7c_cryptolocker

  • Size

    89KB

  • Sample

    240504-cvbpysdh34

  • MD5

    1ed1bf0f48b6d4b998ee153e2c766e7c

  • SHA1

    224d8d4152eb5d79015daa685fc4672c30eb2075

  • SHA256

    5d845a60f5718172334360ef1cf35aeb74047d1fac9f9dfc71e28b652444f65b

  • SHA512

    e8c0151976ee4f05231bd786b4e818f54fc4e8b16eb9a8211c7a93acc83f3e13d5e87325070479b0b1298702d9559c68e5e47a76d86526034300066bedc217ef

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgS8z:AnBdOOtEvwDpj6zH

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-04_1ed1bf0f48b6d4b998ee153e2c766e7c_cryptolocker

    • Size

      89KB

    • MD5

      1ed1bf0f48b6d4b998ee153e2c766e7c

    • SHA1

      224d8d4152eb5d79015daa685fc4672c30eb2075

    • SHA256

      5d845a60f5718172334360ef1cf35aeb74047d1fac9f9dfc71e28b652444f65b

    • SHA512

      e8c0151976ee4f05231bd786b4e818f54fc4e8b16eb9a8211c7a93acc83f3e13d5e87325070479b0b1298702d9559c68e5e47a76d86526034300066bedc217ef

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgS8z:AnBdOOtEvwDpj6zH

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks