Overview

overview

10

Static

static

10

2024-05-24...er.exe

windows7-x64

9

2024-05-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_d3b7a3e1317720ba6becaf838b6b6f65_cryptolocker

  • Size

    52KB

  • Sample

    240524-en2nxace6w

  • MD5

    d3b7a3e1317720ba6becaf838b6b6f65

  • SHA1

    2456383bc37f61224877e5d8531e7ed6cb010d96

  • SHA256

    1f26c0bf3c0caf5e04669b93ee7f94eb405cf5b9cadce150ac675df2222d5596

  • SHA512

    780ec2e7ad3adf4b374c80923e1d57b9264e63255cd519e800ac5496f04fefd4393ceef8443dc07590a56a2bd24ad2412261e5d39137a9f7231832c3626f38a9

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOmu:z6QFElP6n+gKmddpMOtEvwDpj31imu

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-24_d3b7a3e1317720ba6becaf838b6b6f65_cryptolocker

    • Size

      52KB

    • MD5

      d3b7a3e1317720ba6becaf838b6b6f65

    • SHA1

      2456383bc37f61224877e5d8531e7ed6cb010d96

    • SHA256

      1f26c0bf3c0caf5e04669b93ee7f94eb405cf5b9cadce150ac675df2222d5596

    • SHA512

      780ec2e7ad3adf4b374c80923e1d57b9264e63255cd519e800ac5496f04fefd4393ceef8443dc07590a56a2bd24ad2412261e5d39137a9f7231832c3626f38a9

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOmu:z6QFElP6n+gKmddpMOtEvwDpj31imu

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks