Overview

overview

10

Static

static

10

2024-06-01...er.exe

windows7-x64

9

2024-06-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-01_21460c362bf60b8bead78f51c55f00ce_cryptolocker

  • Size

    54KB

  • Sample

    240601-h7qbrsdg6y

  • MD5

    21460c362bf60b8bead78f51c55f00ce

  • SHA1

    eb5d1e993b52fd2769cc1262935da6eeb24bfb85

  • SHA256

    67972a9152fdc0169729f09128e1fd022b67b3466bbbd11ce0625e80356e5a78

  • SHA512

    6b0d5fa306e6b30caf3f3e4e37e2aaed767c61059d06965ccced83b57da1965cc16c8961e61f051229aa312dc54b021458a61f32a2cce955d4ecd0bd82e60b2f

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOk7:z6QFElP6n+gKmddpMOtEvwDpj31ik7

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-01_21460c362bf60b8bead78f51c55f00ce_cryptolocker

    • Size

      54KB

    • MD5

      21460c362bf60b8bead78f51c55f00ce

    • SHA1

      eb5d1e993b52fd2769cc1262935da6eeb24bfb85

    • SHA256

      67972a9152fdc0169729f09128e1fd022b67b3466bbbd11ce0625e80356e5a78

    • SHA512

      6b0d5fa306e6b30caf3f3e4e37e2aaed767c61059d06965ccced83b57da1965cc16c8961e61f051229aa312dc54b021458a61f32a2cce955d4ecd0bd82e60b2f

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOk7:z6QFElP6n+gKmddpMOtEvwDpj31ik7

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks