Overview

overview

10

Static

static

10

2024-05-24...er.exe

windows7-x64

9

2024-05-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_b761f0d2d82608095b0ac45cc78f1a08_cryptolocker

  • Size

    40KB

  • Sample

    240524-zb4mysab4y

  • MD5

    b761f0d2d82608095b0ac45cc78f1a08

  • SHA1

    6789e818b7aa6a8246c38c4f574f2e3cd4ec7728

  • SHA256

    3ddff5b310220c0564a0327aa38c27413b2e32e22d39b2340fedd48c5e880123

  • SHA512

    07992b46d226755212e7b632e8d86ba4e204e3ebb3d48a4424fe43dd32ee41168731642b306e99b275a3b9f66bb2b34ca08a393bcdb04770657ad3929ba1e237

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/4:qDdFJy3QMOtEvwDpjjWMl7Tt

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-24_b761f0d2d82608095b0ac45cc78f1a08_cryptolocker

    • Size

      40KB

    • MD5

      b761f0d2d82608095b0ac45cc78f1a08

    • SHA1

      6789e818b7aa6a8246c38c4f574f2e3cd4ec7728

    • SHA256

      3ddff5b310220c0564a0327aa38c27413b2e32e22d39b2340fedd48c5e880123

    • SHA512

      07992b46d226755212e7b632e8d86ba4e204e3ebb3d48a4424fe43dd32ee41168731642b306e99b275a3b9f66bb2b34ca08a393bcdb04770657ad3929ba1e237

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/4:qDdFJy3QMOtEvwDpjjWMl7Tt

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks