Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-18_e63f4e59a8ba809a61c885a3bea11a66_cryptolocker

  • Size

    93KB

  • Sample

    240118-3g744shae6

  • MD5

    e63f4e59a8ba809a61c885a3bea11a66

  • SHA1

    768f839d06ea1ce451692a9585543be454369d23

  • SHA256

    dfba81cadd4e6f788c6a9c59aba60c405e0a99574fb91bc2963c93287965dc38

  • SHA512

    6c3226a1c7a867ce46b6a6b940fdad2d742da81e66a936820c6e955d20fda7c8e6fe6fa172e20c37d73d0b26992712a9ed7ed1f445bb7cbbc4d676382584f84e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01Q:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-18_e63f4e59a8ba809a61c885a3bea11a66_cryptolocker

    • Size

      93KB

    • MD5

      e63f4e59a8ba809a61c885a3bea11a66

    • SHA1

      768f839d06ea1ce451692a9585543be454369d23

    • SHA256

      dfba81cadd4e6f788c6a9c59aba60c405e0a99574fb91bc2963c93287965dc38

    • SHA512

      6c3226a1c7a867ce46b6a6b940fdad2d742da81e66a936820c6e955d20fda7c8e6fe6fa172e20c37d73d0b26992712a9ed7ed1f445bb7cbbc4d676382584f84e

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01Q:AnBdOOtEvwDpj6ze

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks