Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_fb157818fdff78f6de6e29a4671b36db_cryptolocker

  • Size

    39KB

  • Sample

    240521-tkh5qabd5w

  • MD5

    fb157818fdff78f6de6e29a4671b36db

  • SHA1

    f40de9389272e92066f3f6e4a7f54898ca5b2292

  • SHA256

    9b6da4d6845609f02788a582b81631c8201c35281c9fe109c2e6e5cbdff684c3

  • SHA512

    13e373dda09d3628d5492ace9169104327e6d2e17947834e5163b0ab5d6d5d0ca025c0de4ccd160619ebdcc4e127c380524702e52d56f8fe417a8a1dad7cc72d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB4:qDdFJy3QMOtEvwDpjjWMl7Tdq

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-21_fb157818fdff78f6de6e29a4671b36db_cryptolocker

    • Size

      39KB

    • MD5

      fb157818fdff78f6de6e29a4671b36db

    • SHA1

      f40de9389272e92066f3f6e4a7f54898ca5b2292

    • SHA256

      9b6da4d6845609f02788a582b81631c8201c35281c9fe109c2e6e5cbdff684c3

    • SHA512

      13e373dda09d3628d5492ace9169104327e6d2e17947834e5163b0ab5d6d5d0ca025c0de4ccd160619ebdcc4e127c380524702e52d56f8fe417a8a1dad7cc72d

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB4:qDdFJy3QMOtEvwDpjjWMl7Tdq

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks