Overview

overview

10

Static

static

10

2024-05-05...er.exe

windows7-x64

9

2024-05-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-05_1131335874212e75fc16ae99bd342b15_cryptolocker

  • Size

    71KB

  • Sample

    240505-dxn9hage28

  • MD5

    1131335874212e75fc16ae99bd342b15

  • SHA1

    266d6a6c2237e6919857db812ef974ee0258dfb0

  • SHA256

    82117e165895a1dd89185887746a5143f379e2b487bbb4be000cb4d6acce08b4

  • SHA512

    591a947a9272c42a8a6897f89d03728b2fb1ddeffc05b1c3df2182e70c28f0f3e88f6428e4b452a3556c084dc70958521acec09147167b7098be9ee23aebbfce

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97t:C4Q2c94OtEvwDpj4H8zg

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-05_1131335874212e75fc16ae99bd342b15_cryptolocker

    • Size

      71KB

    • MD5

      1131335874212e75fc16ae99bd342b15

    • SHA1

      266d6a6c2237e6919857db812ef974ee0258dfb0

    • SHA256

      82117e165895a1dd89185887746a5143f379e2b487bbb4be000cb4d6acce08b4

    • SHA512

      591a947a9272c42a8a6897f89d03728b2fb1ddeffc05b1c3df2182e70c28f0f3e88f6428e4b452a3556c084dc70958521acec09147167b7098be9ee23aebbfce

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97t:C4Q2c94OtEvwDpj4H8zg

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks