Overview

overview

10

Static

static

10

2024-06-10...er.exe

windows7-x64

9

2024-06-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-10_6e8815b5ea34f36e20b4fef66eb61de9_cryptolocker

  • Size

    53KB

  • Sample

    240610-tcd6sssfnr

  • MD5

    6e8815b5ea34f36e20b4fef66eb61de9

  • SHA1

    5a80c3670b798bc328e4f3ca60fda1569ed46ada

  • SHA256

    c3775fa4a3993d5d69694c2af4d4fcb1f77984e05e5194479d0e45c9896fdc13

  • SHA512

    022263513071be2c6a7531caf21f1d2b30b8c8f7d09d2362a9936cb1c467b266387ddd0fc0142183d4fe92a395da3d9565b52a5f425bd4c0baa7c9d4ebb88f0d

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOm5:z6QFElP6n+gKmddpMOtEvwDpj31im5

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_6e8815b5ea34f36e20b4fef66eb61de9_cryptolocker

    • Size

      53KB

    • MD5

      6e8815b5ea34f36e20b4fef66eb61de9

    • SHA1

      5a80c3670b798bc328e4f3ca60fda1569ed46ada

    • SHA256

      c3775fa4a3993d5d69694c2af4d4fcb1f77984e05e5194479d0e45c9896fdc13

    • SHA512

      022263513071be2c6a7531caf21f1d2b30b8c8f7d09d2362a9936cb1c467b266387ddd0fc0142183d4fe92a395da3d9565b52a5f425bd4c0baa7c9d4ebb88f0d

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOm5:z6QFElP6n+gKmddpMOtEvwDpj31im5

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks