Overview

overview

10

Static

static

10

2024-06-16...er.exe

windows7-x64

9

2024-06-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-16_66d6e2db69d9639d45f1189eb1e603ed_cryptolocker

  • Size

    43KB

  • Sample

    240616-rtt78swhmb

  • MD5

    66d6e2db69d9639d45f1189eb1e603ed

  • SHA1

    640fb0773b0d720c6e25ff83cde2b0d1dcc1b7c8

  • SHA256

    6d1a996a1eb9d3bcb87479e3f7a1cce4b1b4bdc00bfd36a4e9dd46ec980dd813

  • SHA512

    95ff9cd31b0a290410cdd293715f040e266223736633848901d45e0781b07d4db39057432714a58c7fa242608154b9e98544abb51c9ad7af860ac32c04d82fcf

  • SSDEEP

    768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKo3v:ba6YcA/Xk3wXFXSqAJCv

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-16_66d6e2db69d9639d45f1189eb1e603ed_cryptolocker

    • Size

      43KB

    • MD5

      66d6e2db69d9639d45f1189eb1e603ed

    • SHA1

      640fb0773b0d720c6e25ff83cde2b0d1dcc1b7c8

    • SHA256

      6d1a996a1eb9d3bcb87479e3f7a1cce4b1b4bdc00bfd36a4e9dd46ec980dd813

    • SHA512

      95ff9cd31b0a290410cdd293715f040e266223736633848901d45e0781b07d4db39057432714a58c7fa242608154b9e98544abb51c9ad7af860ac32c04d82fcf

    • SSDEEP

      768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKo3v:ba6YcA/Xk3wXFXSqAJCv

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks