Overview

overview

10

Static

static

10

2024-05-24...er.exe

windows7-x64

9

2024-05-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_87002858a71e6bb465cf060b021019d0_cryptolocker

  • Size

    51KB

  • Sample

    240524-ecafaabh86

  • MD5

    87002858a71e6bb465cf060b021019d0

  • SHA1

    9bcc9c36a806102e1a69617e2267fe7abb08506e

  • SHA256

    bb9be337fea96a2b120f0dab549df6dae6bcc1a9be5b03e1bc14507e3e3f74ea

  • SHA512

    83efcb8c6cd403563c988ec8bace255ad619332044d25f6e8c9735a576a65a38bc05d69224ffd2315f5d6b2a805ca877129e6ed4206408e80116dc38f929637c

  • SSDEEP

    768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtXiQ:bODOw9acifAoc+vXiQ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-24_87002858a71e6bb465cf060b021019d0_cryptolocker

    • Size

      51KB

    • MD5

      87002858a71e6bb465cf060b021019d0

    • SHA1

      9bcc9c36a806102e1a69617e2267fe7abb08506e

    • SHA256

      bb9be337fea96a2b120f0dab549df6dae6bcc1a9be5b03e1bc14507e3e3f74ea

    • SHA512

      83efcb8c6cd403563c988ec8bace255ad619332044d25f6e8c9735a576a65a38bc05d69224ffd2315f5d6b2a805ca877129e6ed4206408e80116dc38f929637c

    • SSDEEP

      768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtXiQ:bODOw9acifAoc+vXiQ

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks