Overview

overview

10

Static

static

10

2024-01-22...er.exe

windows7-x64

9

2024-01-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-22_770fb2df5d7654b7897fe7d503f73305_cryptolocker

  • Size

    89KB

  • Sample

    240122-zenqxadfc6

  • MD5

    770fb2df5d7654b7897fe7d503f73305

  • SHA1

    49e3c1bd4ca548d7493e32b7008cf9e1e5c071b1

  • SHA256

    e55290cdd5d66d13b9c898146b8dc8db2bc991dd83b8284d4139d3843006e759

  • SHA512

    468f7ff4420513d96926f90fbb4af2b602fed8aa59b17320afc96a96c5ad0ff2d2cbccab38ce74378a989562a98b7a445b7b31f7988e07cb47e8933416aad526

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRMy87Ua:zCsanOtEvwDpjf

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-22_770fb2df5d7654b7897fe7d503f73305_cryptolocker

    • Size

      89KB

    • MD5

      770fb2df5d7654b7897fe7d503f73305

    • SHA1

      49e3c1bd4ca548d7493e32b7008cf9e1e5c071b1

    • SHA256

      e55290cdd5d66d13b9c898146b8dc8db2bc991dd83b8284d4139d3843006e759

    • SHA512

      468f7ff4420513d96926f90fbb4af2b602fed8aa59b17320afc96a96c5ad0ff2d2cbccab38ce74378a989562a98b7a445b7b31f7988e07cb47e8933416aad526

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRMy87Ua:zCsanOtEvwDpjf

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks