Overview

overview

7

Static

static

7

20240521bf...er.exe

windows7-x64

7

20240521bf...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240521bf838e8ca2f12d922652714032ac8fb0cryptolocker.exe

  • Size

    95KB

  • Sample

    240522-xhtefscf5y

  • MD5

    bf838e8ca2f12d922652714032ac8fb0

  • SHA1

    3e022a2ecb674f02644b73e7d0b876399bee7e71

  • SHA256

    ee8a26d3cf4927ecdb9dc74a57b2a67cc7a1bc306fd73d7dd5bba09a910ed139

  • SHA512

    6d5bd5244f3d7046838b16a82212a9d6fe1543c0586f000749318c2c3b2ef9274942c0d71fef8e3739386b92c45a5abb7c3c3ac73f9a1e218f4c565caac28982

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+h:AnBdOOtEvwDpj6zG

Score
7/10
upx

Malware Config

Targets

    • Target

      20240521bf838e8ca2f12d922652714032ac8fb0cryptolocker.exe

    • Size

      95KB

    • MD5

      bf838e8ca2f12d922652714032ac8fb0

    • SHA1

      3e022a2ecb674f02644b73e7d0b876399bee7e71

    • SHA256

      ee8a26d3cf4927ecdb9dc74a57b2a67cc7a1bc306fd73d7dd5bba09a910ed139

    • SHA512

      6d5bd5244f3d7046838b16a82212a9d6fe1543c0586f000749318c2c3b2ef9274942c0d71fef8e3739386b92c45a5abb7c3c3ac73f9a1e218f4c565caac28982

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+h:AnBdOOtEvwDpj6zG

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks