Overview

overview

10

Static

static

10

2024-06-02...er.exe

windows7-x64

9

2024-06-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-02_2b7ea07ea7c5232f19c25cca1167d7ae_cryptolocker

  • Size

    91KB

  • Sample

    240602-d1qlqshc81

  • MD5

    2b7ea07ea7c5232f19c25cca1167d7ae

  • SHA1

    1caa9877bdc5f4009351a399d3c733206f3cb232

  • SHA256

    bf9a6cbf706bf423973a9e357c7022d37a49023b118473a2e9654d3189231836

  • SHA512

    a1592c4820ee5f66d581348e4ef36d3d2d282e25efaff55a96a06c0c9990df251d52643925d18682e1f65ddf0a09cc1e86e45885c355ddacc6d73a821ae4f2b0

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/h:n6a+1SEOtEvwDpjYYvQd2Pi

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-02_2b7ea07ea7c5232f19c25cca1167d7ae_cryptolocker

    • Size

      91KB

    • MD5

      2b7ea07ea7c5232f19c25cca1167d7ae

    • SHA1

      1caa9877bdc5f4009351a399d3c733206f3cb232

    • SHA256

      bf9a6cbf706bf423973a9e357c7022d37a49023b118473a2e9654d3189231836

    • SHA512

      a1592c4820ee5f66d581348e4ef36d3d2d282e25efaff55a96a06c0c9990df251d52643925d18682e1f65ddf0a09cc1e86e45885c355ddacc6d73a821ae4f2b0

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/h:n6a+1SEOtEvwDpjYYvQd2Pi

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks