Overview

overview

10

Static

static

10

2024-05-27...er.exe

windows7-x64

9

2024-05-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-27_669e85a929efc1c94e0894eb98eb1b2d_cryptolocker

  • Size

    92KB

  • Sample

    240527-w6eersdd5v

  • MD5

    669e85a929efc1c94e0894eb98eb1b2d

  • SHA1

    2ec5b60944c1ae144ba39e0578bf7ef829c1cbcf

  • SHA256

    cdec830d15017686957fc89ee126c6210d3b75bb3d98e3360d7a9cdbc7d680c8

  • SHA512

    22acb68c1e81582eced5a135ac0f5eaeec94bc85e4c192be433a5b5c804c0df3b4eb3bd4a683e4aaf6a06ee61f6c7aff0e81407c44311d96da9dec5c164ae0f4

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddR:AnBdOOtEvwDpj6zV

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-27_669e85a929efc1c94e0894eb98eb1b2d_cryptolocker

    • Size

      92KB

    • MD5

      669e85a929efc1c94e0894eb98eb1b2d

    • SHA1

      2ec5b60944c1ae144ba39e0578bf7ef829c1cbcf

    • SHA256

      cdec830d15017686957fc89ee126c6210d3b75bb3d98e3360d7a9cdbc7d680c8

    • SHA512

      22acb68c1e81582eced5a135ac0f5eaeec94bc85e4c192be433a5b5c804c0df3b4eb3bd4a683e4aaf6a06ee61f6c7aff0e81407c44311d96da9dec5c164ae0f4

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddR:AnBdOOtEvwDpj6zV

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks