Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_37c25a9857c5f1955ff5455caa0dbbb9_cryptolocker

  • Size

    39KB

  • Sample

    240521-syk1ssaf2t

  • MD5

    37c25a9857c5f1955ff5455caa0dbbb9

  • SHA1

    1f12d728d584d882b269c57e7d4a20ce74d2492b

  • SHA256

    de00d8ceeb248d412b62d5ca531b06589edaa472f50adce193cfb1e01f281b7a

  • SHA512

    a524336a1f7b87c1b1fae5e340a9cb313f48b2bdcb6e41264ab89483f6b808ef9d859be0e3578d147be03bb80f46f470f79cbc5010b6c3e997d6a5cf12449f23

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYc:qDdFJy3QMOtEvwDpjjWMl7TZ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-21_37c25a9857c5f1955ff5455caa0dbbb9_cryptolocker

    • Size

      39KB

    • MD5

      37c25a9857c5f1955ff5455caa0dbbb9

    • SHA1

      1f12d728d584d882b269c57e7d4a20ce74d2492b

    • SHA256

      de00d8ceeb248d412b62d5ca531b06589edaa472f50adce193cfb1e01f281b7a

    • SHA512

      a524336a1f7b87c1b1fae5e340a9cb313f48b2bdcb6e41264ab89483f6b808ef9d859be0e3578d147be03bb80f46f470f79cbc5010b6c3e997d6a5cf12449f23

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYc:qDdFJy3QMOtEvwDpjjWMl7TZ

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks