Overview

overview

10

Static

static

10

2024-05-14...er.exe

windows7-x64

9

2024-05-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-14_65e1a94fa9c0229badc491fa3f7baf5a_cryptolocker

  • Size

    51KB

  • Sample

    240514-x9wc5adb72

  • MD5

    65e1a94fa9c0229badc491fa3f7baf5a

  • SHA1

    e337dfad17b3b6b66f88055c94d47b8a320c9cf7

  • SHA256

    cc661d80c06303c789a2200af731449d42c423abf9dbff4d0dad48b5d8f2f470

  • SHA512

    7724335d22d882c7ee1c5dad948585af1a766b7290aecd1b8ef9fa5b955ec5a18d3bd4ccd5d3d15ff31ee8447693b0dab9c06cc58201bcd1e70caa5de6754bd8

  • SSDEEP

    768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtO9:bODOw9acifAoc+v6

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-14_65e1a94fa9c0229badc491fa3f7baf5a_cryptolocker

    • Size

      51KB

    • MD5

      65e1a94fa9c0229badc491fa3f7baf5a

    • SHA1

      e337dfad17b3b6b66f88055c94d47b8a320c9cf7

    • SHA256

      cc661d80c06303c789a2200af731449d42c423abf9dbff4d0dad48b5d8f2f470

    • SHA512

      7724335d22d882c7ee1c5dad948585af1a766b7290aecd1b8ef9fa5b955ec5a18d3bd4ccd5d3d15ff31ee8447693b0dab9c06cc58201bcd1e70caa5de6754bd8

    • SSDEEP

      768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtO9:bODOw9acifAoc+v6

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks