Overview

overview

10

Static

static

10

2024-05-26...er.exe

windows7-x64

9

2024-05-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-26_6bb2c0e8946fb6a65e72b25049ce1497_cryptolocker

  • Size

    90KB

  • Sample

    240526-e2tkfseh5w

  • MD5

    6bb2c0e8946fb6a65e72b25049ce1497

  • SHA1

    95cbb72cb3f45c4d7f1ddf5779de82c966d3d4a5

  • SHA256

    ae5b6978ad96f502a04ea64f94e228f0607955670733f9e9794d1e0eec1b03b3

  • SHA512

    8f426f668937f367c88cd228b0ee49c86ff82f96e8c7d31bf14eab6214e73df12c6d7493fbac7d28d395754ccb738cc15fda20af9485981115dfdeb199db85e4

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyJ:n6a+1SEOtEvwDpjYYvQd2Pg

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-26_6bb2c0e8946fb6a65e72b25049ce1497_cryptolocker

    • Size

      90KB

    • MD5

      6bb2c0e8946fb6a65e72b25049ce1497

    • SHA1

      95cbb72cb3f45c4d7f1ddf5779de82c966d3d4a5

    • SHA256

      ae5b6978ad96f502a04ea64f94e228f0607955670733f9e9794d1e0eec1b03b3

    • SHA512

      8f426f668937f367c88cd228b0ee49c86ff82f96e8c7d31bf14eab6214e73df12c6d7493fbac7d28d395754ccb738cc15fda20af9485981115dfdeb199db85e4

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyJ:n6a+1SEOtEvwDpjYYvQd2Pg

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks