Overview

overview

10

Static

static

10

2024-01-22...er.exe

windows7-x64

9

2024-01-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-22_4ae4c123013e4917420361d4b9879825_cryptolocker

  • Size

    69KB

  • Sample

    240122-sv5wsshghk

  • MD5

    4ae4c123013e4917420361d4b9879825

  • SHA1

    78aebdbe08be3e068682c868fd3d2a12d6263ad5

  • SHA256

    f4ff839484e8429015b90d749a3daab7aa8d5d7ffc6451a5151d2f1b1b649d76

  • SHA512

    78b23f7e6b3e49cb3d2cc0b20fbd138751b1e6b58d9eaa8a245e92ecbd2f8da7d6cc6aa3397e51d0c515247e9100b3de9447baed925b2a5ef10cd07f04e1269b

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal3j:1nK6a+qdOOtEvwDpj8j

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-22_4ae4c123013e4917420361d4b9879825_cryptolocker

    • Size

      69KB

    • MD5

      4ae4c123013e4917420361d4b9879825

    • SHA1

      78aebdbe08be3e068682c868fd3d2a12d6263ad5

    • SHA256

      f4ff839484e8429015b90d749a3daab7aa8d5d7ffc6451a5151d2f1b1b649d76

    • SHA512

      78b23f7e6b3e49cb3d2cc0b20fbd138751b1e6b58d9eaa8a245e92ecbd2f8da7d6cc6aa3397e51d0c515247e9100b3de9447baed925b2a5ef10cd07f04e1269b

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal3j:1nK6a+qdOOtEvwDpj8j

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks