Overview

overview

10

Static

static

10

2024-06-13...er.exe

windows7-x64

9

2024-06-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-13_5a66d93018fecabff7b2c2c26d3c9a5d_cryptolocker

  • Size

    40KB

  • Sample

    240613-f55bsszbnq

  • MD5

    5a66d93018fecabff7b2c2c26d3c9a5d

  • SHA1

    2cd654c223f77a333708e78a9a908323ba309316

  • SHA256

    e9d43a1bf9c2941cf90122340f60de2472820e7076b44822154fbb02cd313112

  • SHA512

    7a2cdfc1c31430c2c5b4fcfec00d2e1fd6a67d600ef91c404a61a6dd648e9d922d6abc17550e02592517f0a33e7fd5e461c23a4f9b1a39add33f202dbceac818

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbz:qDdFJy3QMOtEvwDpjjWMl7Td/

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-13_5a66d93018fecabff7b2c2c26d3c9a5d_cryptolocker

    • Size

      40KB

    • MD5

      5a66d93018fecabff7b2c2c26d3c9a5d

    • SHA1

      2cd654c223f77a333708e78a9a908323ba309316

    • SHA256

      e9d43a1bf9c2941cf90122340f60de2472820e7076b44822154fbb02cd313112

    • SHA512

      7a2cdfc1c31430c2c5b4fcfec00d2e1fd6a67d600ef91c404a61a6dd648e9d922d6abc17550e02592517f0a33e7fd5e461c23a4f9b1a39add33f202dbceac818

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbz:qDdFJy3QMOtEvwDpjjWMl7Td/

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks