Overview

overview

10

Static

static

10

2024-05-30...er.exe

windows7-x64

9

2024-05-30...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-30_85d2c5e5448298f410f8e1b8b484e494_cryptolocker

  • Size

    76KB

  • Sample

    240530-svc6sach6w

  • MD5

    85d2c5e5448298f410f8e1b8b484e494

  • SHA1

    556c10f474c15ebdedb5b97fdae9d44ef4c99118

  • SHA256

    598e500c7a43781550b580b9a935a542de13665f9d3f018bc942ee41380a29e0

  • SHA512

    8edcb6b5a2161c6670da7b6e934c82695883afb6aee6a17de90350c7844c4bd9a9d22a59e4867d72f174382da1df980c637bde2b0f3b31abc0d31f92feb9a28d

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gb:1nK6a+qdOOtEvwDpjC

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-30_85d2c5e5448298f410f8e1b8b484e494_cryptolocker

    • Size

      76KB

    • MD5

      85d2c5e5448298f410f8e1b8b484e494

    • SHA1

      556c10f474c15ebdedb5b97fdae9d44ef4c99118

    • SHA256

      598e500c7a43781550b580b9a935a542de13665f9d3f018bc942ee41380a29e0

    • SHA512

      8edcb6b5a2161c6670da7b6e934c82695883afb6aee6a17de90350c7844c4bd9a9d22a59e4867d72f174382da1df980c637bde2b0f3b31abc0d31f92feb9a28d

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gb:1nK6a+qdOOtEvwDpjC

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks