Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_4fb43bcb11143688d9c58b2568dd1825_cryptolocker

  • Size

    91KB

  • Sample

    240521-s1vysaaf7x

  • MD5

    4fb43bcb11143688d9c58b2568dd1825

  • SHA1

    94d34575f4db67c000432aab8e2d0b258a84258d

  • SHA256

    a071d0152dd3d1c70fbd0bda77a417fac3e0e0238aabee71e1f49608777e10a0

  • SHA512

    6f120e74db92d733b02ea281853d1cde689e1a4569efff7bf5d2f44b5860c8ba7831cf2aefb8ea9da77968073b90d9eb0be5e4c69da508546533c0094cec72cc

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/Dc:n6a+1SEOtEvwDpjYYvQd2Pv

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-21_4fb43bcb11143688d9c58b2568dd1825_cryptolocker

    • Size

      91KB

    • MD5

      4fb43bcb11143688d9c58b2568dd1825

    • SHA1

      94d34575f4db67c000432aab8e2d0b258a84258d

    • SHA256

      a071d0152dd3d1c70fbd0bda77a417fac3e0e0238aabee71e1f49608777e10a0

    • SHA512

      6f120e74db92d733b02ea281853d1cde689e1a4569efff7bf5d2f44b5860c8ba7831cf2aefb8ea9da77968073b90d9eb0be5e4c69da508546533c0094cec72cc

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/Dc:n6a+1SEOtEvwDpjYYvQd2Pv

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks