Overview

overview

10

Static

static

10

2024-05-12...er.exe

windows7-x64

9

2024-05-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-12_6e440ace38061a8bd7da1f90bffa69ba_cryptolocker

  • Size

    56KB

  • Sample

    240512-fbv62acc95

  • MD5

    6e440ace38061a8bd7da1f90bffa69ba

  • SHA1

    516f9ebfd647d1ed1002ddbec001a6badc9d31fa

  • SHA256

    947bddf9e5fb5a50a5239e423ceaf926056671a5e02d5f675ea8f6e466aea2f4

  • SHA512

    0f8b0ffed09b76e81c2569a2b6a637fac1d30a37417ce523f1a4c5cfd8544719d283f98ac05241afd98ed6da62c0263d236cca04b994b84c53503ea72a3d6ff9

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+f:bP9g/xtCS3Dxx0Jf

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-12_6e440ace38061a8bd7da1f90bffa69ba_cryptolocker

    • Size

      56KB

    • MD5

      6e440ace38061a8bd7da1f90bffa69ba

    • SHA1

      516f9ebfd647d1ed1002ddbec001a6badc9d31fa

    • SHA256

      947bddf9e5fb5a50a5239e423ceaf926056671a5e02d5f675ea8f6e466aea2f4

    • SHA512

      0f8b0ffed09b76e81c2569a2b6a637fac1d30a37417ce523f1a4c5cfd8544719d283f98ac05241afd98ed6da62c0263d236cca04b994b84c53503ea72a3d6ff9

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+f:bP9g/xtCS3Dxx0Jf

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks