Overview

overview

10

Static

static

10

2024-06-05...er.exe

windows7-x64

9

2024-06-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-05_3f88378ce4c4f3b9bb1bdd10e55cfa09_cryptolocker

  • Size

    90KB

  • Sample

    240605-cz3n8sce27

  • MD5

    3f88378ce4c4f3b9bb1bdd10e55cfa09

  • SHA1

    e0ba47830150c09cf483203d858e9407e735f4c0

  • SHA256

    b2a902e7695fa3f5a7b3527dfcafeccb6e1339fb6205715a672ead9dcf5887dd

  • SHA512

    1c48ca890cfdfeab5536e307bff5871e714f41ddd818c9aaed2469fcde83e6bec26e92a6eb37623b982e27f2a7b2efa0f3b08f41e8f58ec4ee68eb9fa18eb90e

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODwl:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgk

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-05_3f88378ce4c4f3b9bb1bdd10e55cfa09_cryptolocker

    • Size

      90KB

    • MD5

      3f88378ce4c4f3b9bb1bdd10e55cfa09

    • SHA1

      e0ba47830150c09cf483203d858e9407e735f4c0

    • SHA256

      b2a902e7695fa3f5a7b3527dfcafeccb6e1339fb6205715a672ead9dcf5887dd

    • SHA512

      1c48ca890cfdfeab5536e307bff5871e714f41ddd818c9aaed2469fcde83e6bec26e92a6eb37623b982e27f2a7b2efa0f3b08f41e8f58ec4ee68eb9fa18eb90e

    • SSDEEP

      768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODwl:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgk

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks