Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-11_0ee4349bc3972ee212a9c106323b829e_cryptolocker

  • Size

    56KB

  • Sample

    240511-e18yradb6s

  • MD5

    0ee4349bc3972ee212a9c106323b829e

  • SHA1

    585419106302de209de334be9cffeab725624ecf

  • SHA256

    fb3b649ba206b377ed30dd01ba5c054909ab73f93b716fcad3f0ff7fc0f6a7ac

  • SHA512

    08c4cac1bb2caad16c93dcc1cfaa2a216ff9b925ec3975e2b7d6b9e5e80b623dc0a5806e90b558ee4870d74a38b4134787622a7e5730bd74a0f22db383e45099

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+Z:bP9g/xtCS3Dxx0JZ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-11_0ee4349bc3972ee212a9c106323b829e_cryptolocker

    • Size

      56KB

    • MD5

      0ee4349bc3972ee212a9c106323b829e

    • SHA1

      585419106302de209de334be9cffeab725624ecf

    • SHA256

      fb3b649ba206b377ed30dd01ba5c054909ab73f93b716fcad3f0ff7fc0f6a7ac

    • SHA512

      08c4cac1bb2caad16c93dcc1cfaa2a216ff9b925ec3975e2b7d6b9e5e80b623dc0a5806e90b558ee4870d74a38b4134787622a7e5730bd74a0f22db383e45099

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+Z:bP9g/xtCS3Dxx0JZ

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks