Overview

overview

10

Static

static

10

2024-05-16...er.exe

windows7-x64

9

2024-05-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-16_82d9e05e368d3f98d8112b10676ec6eb_cryptolocker

  • Size

    23KB

  • Sample

    240516-vgyxfaef62

  • MD5

    82d9e05e368d3f98d8112b10676ec6eb

  • SHA1

    b408f142921ff04138bf5f1c0aa446b94f72e8cb

  • SHA256

    9bc7ca04df2b10d5c67523008bc9c278c4ea830c5f55444a7266fb7ba86625da

  • SHA512

    51a6b86fb0c8c08cc47dd5a35bd24984257307c39818fc12d5a1f89429c41758b5fbec858e986fe1541ac38deffc0c647ac646f7580dfcb7174eba075d0340ec

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HjUB:bVCPwFRo6CpwXFXSqQXfjAq

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-16_82d9e05e368d3f98d8112b10676ec6eb_cryptolocker

    • Size

      23KB

    • MD5

      82d9e05e368d3f98d8112b10676ec6eb

    • SHA1

      b408f142921ff04138bf5f1c0aa446b94f72e8cb

    • SHA256

      9bc7ca04df2b10d5c67523008bc9c278c4ea830c5f55444a7266fb7ba86625da

    • SHA512

      51a6b86fb0c8c08cc47dd5a35bd24984257307c39818fc12d5a1f89429c41758b5fbec858e986fe1541ac38deffc0c647ac646f7580dfcb7174eba075d0340ec

    • SSDEEP

      384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HjUB:bVCPwFRo6CpwXFXSqQXfjAq

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks