Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-18_d890da68cab63513f58f60b6e289ba05_cryptolocker

  • Size

    63KB

  • Sample

    240118-3enmpagff3

  • MD5

    d890da68cab63513f58f60b6e289ba05

  • SHA1

    1955c17c677939c0ed8e4dd2d766186cf999ebdc

  • SHA256

    6df6ed88d75bfe61d9eaff6f9eac53918be50d4fb27a374dc879de97c0a316a4

  • SHA512

    9835f6b29503248a04249d5c0745890dab0e008c98947db6ef95d9f1592d0a8e620d41da4b59808541cb531a9c944f960e98db24f1e9bc695fa432dcd44d303d

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6Ug:1nK6a+qdOOtEvwDpj1

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-18_d890da68cab63513f58f60b6e289ba05_cryptolocker

    • Size

      63KB

    • MD5

      d890da68cab63513f58f60b6e289ba05

    • SHA1

      1955c17c677939c0ed8e4dd2d766186cf999ebdc

    • SHA256

      6df6ed88d75bfe61d9eaff6f9eac53918be50d4fb27a374dc879de97c0a316a4

    • SHA512

      9835f6b29503248a04249d5c0745890dab0e008c98947db6ef95d9f1592d0a8e620d41da4b59808541cb531a9c944f960e98db24f1e9bc695fa432dcd44d303d

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6Ug:1nK6a+qdOOtEvwDpj1

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks