Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-11_d056df3ef182508448d86d45e3ce5288_cryptolocker

  • Size

    39KB

  • Sample

    240511-3hzjcsea9x

  • MD5

    d056df3ef182508448d86d45e3ce5288

  • SHA1

    076dccdb918dd2dfae790b474b4872c74a569b5a

  • SHA256

    1c0fe7576cf4b8558214b3ba0e0a21cef70c153af8a602a0b1c9fa2923842366

  • SHA512

    8a13e37c99a0d01712672016cbcdda6bd28d6d9c65495bee6930429c65ada01e8e5b5e9e9eb0965c26c6dc6fcd6ea6c6724e902dafd8375ef0f854af867a35a7

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/U:qDdFJy3QMOtEvwDpjjWMl7Tx

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-11_d056df3ef182508448d86d45e3ce5288_cryptolocker

    • Size

      39KB

    • MD5

      d056df3ef182508448d86d45e3ce5288

    • SHA1

      076dccdb918dd2dfae790b474b4872c74a569b5a

    • SHA256

      1c0fe7576cf4b8558214b3ba0e0a21cef70c153af8a602a0b1c9fa2923842366

    • SHA512

      8a13e37c99a0d01712672016cbcdda6bd28d6d9c65495bee6930429c65ada01e8e5b5e9e9eb0965c26c6dc6fcd6ea6c6724e902dafd8375ef0f854af867a35a7

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/U:qDdFJy3QMOtEvwDpjjWMl7Tx

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks