Overview

overview

10

Static

static

10

2024-05-04...er.exe

windows7-x64

9

2024-05-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-04_620adec8980fc84c9ce8043608a0b5ce_cryptolocker

  • Size

    77KB

  • Sample

    240504-fams9sdd5s

  • MD5

    620adec8980fc84c9ce8043608a0b5ce

  • SHA1

    c59c540adaf56c80388e02038c391ff489259083

  • SHA256

    f2ea43e08a230af543f16d79b517f73028038f55d413e4c3e5f384d849e44aae

  • SHA512

    23cc12158f986b21a179d842802b85ac1e41c6e93df9a7593eedf67ffcc1b619916a4a06d26267b7390770002c6cde3a672a20c20f46d820de44964a429fae18

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1b:T6a+rdOOtEvwDpjNtHPQ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-04_620adec8980fc84c9ce8043608a0b5ce_cryptolocker

    • Size

      77KB

    • MD5

      620adec8980fc84c9ce8043608a0b5ce

    • SHA1

      c59c540adaf56c80388e02038c391ff489259083

    • SHA256

      f2ea43e08a230af543f16d79b517f73028038f55d413e4c3e5f384d849e44aae

    • SHA512

      23cc12158f986b21a179d842802b85ac1e41c6e93df9a7593eedf67ffcc1b619916a4a06d26267b7390770002c6cde3a672a20c20f46d820de44964a429fae18

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1b:T6a+rdOOtEvwDpjNtHPQ

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks