Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-22_3f3db565d7d1823c8fdc5d7134821808_cryptolocker

  • Size

    39KB

  • Sample

    240522-r1efcsef7x

  • MD5

    3f3db565d7d1823c8fdc5d7134821808

  • SHA1

    4bd56244cacb3660b76ef17e57d2cee538311633

  • SHA256

    9d181653eca1f662a62603306ef8ffb178fe6ee7cf0ea7cd1adb55301acd851e

  • SHA512

    421ecccbde5a746771ab4bd32dcf157a99dcb3980ad03ac94e187fd777913d3b641be550c1868d8a1cceba2ece940c757467b21d3a4d02e5a1c5c51d16193b30

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9V:qDdFJy3QMOtEvwDpjjWMl7Te

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-22_3f3db565d7d1823c8fdc5d7134821808_cryptolocker

    • Size

      39KB

    • MD5

      3f3db565d7d1823c8fdc5d7134821808

    • SHA1

      4bd56244cacb3660b76ef17e57d2cee538311633

    • SHA256

      9d181653eca1f662a62603306ef8ffb178fe6ee7cf0ea7cd1adb55301acd851e

    • SHA512

      421ecccbde5a746771ab4bd32dcf157a99dcb3980ad03ac94e187fd777913d3b641be550c1868d8a1cceba2ece940c757467b21d3a4d02e5a1c5c51d16193b30

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9V:qDdFJy3QMOtEvwDpjjWMl7Te

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks