Overview

overview

10

Static

static

10

2024-06-04...er.exe

windows7-x64

9

2024-06-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-04_50b519a1bda6fcc1bf5dd1d046d19fc5_cryptolocker

  • Size

    72KB

  • Sample

    240604-3e9j6afa41

  • MD5

    50b519a1bda6fcc1bf5dd1d046d19fc5

  • SHA1

    00744a54f0d0af09688cda21ad3a522ea144c1a6

  • SHA256

    a0a77418f97176187808ecc79a4f87bb1313bd1e04fa1c68aefcb645929e4b1f

  • SHA512

    a9ab6c5d8079221e225376492e5660c47b8e6134856a5f9e84dbfa69d81d78edff2ab0624df4e0f5af4ecd770ce0c03fb7c570e34069203d18cca1003094da05

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xF:C4Q2c94OtEvwDpj4H8z6

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-04_50b519a1bda6fcc1bf5dd1d046d19fc5_cryptolocker

    • Size

      72KB

    • MD5

      50b519a1bda6fcc1bf5dd1d046d19fc5

    • SHA1

      00744a54f0d0af09688cda21ad3a522ea144c1a6

    • SHA256

      a0a77418f97176187808ecc79a4f87bb1313bd1e04fa1c68aefcb645929e4b1f

    • SHA512

      a9ab6c5d8079221e225376492e5660c47b8e6134856a5f9e84dbfa69d81d78edff2ab0624df4e0f5af4ecd770ce0c03fb7c570e34069203d18cca1003094da05

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xF:C4Q2c94OtEvwDpj4H8z6

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks