Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_fe71260e5088c9f7274299b1a68cc9f1_cryptolocker

  • Size

    117KB

  • Sample

    240125-p2h4tsgggq

  • MD5

    fe71260e5088c9f7274299b1a68cc9f1

  • SHA1

    68b4bca7375c05833fd5a3a5eb4962789352afaf

  • SHA256

    f2cb6e6cd5c2dc0bf2ceee067acadb1b86c8731d04a50fd4a6c649c13ca858a5

  • SHA512

    31172c052f05bddc23a129fc15feff4a03ff3f1f59d4c6c03d73a2b77040e80ebcc562e7fa07f2776752580c2e3f883c50be714d57345ee0a3927620a06b9c60

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01QaT:z6a+CdOOtEvwDpjcz5

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-25_fe71260e5088c9f7274299b1a68cc9f1_cryptolocker

    • Size

      117KB

    • MD5

      fe71260e5088c9f7274299b1a68cc9f1

    • SHA1

      68b4bca7375c05833fd5a3a5eb4962789352afaf

    • SHA256

      f2cb6e6cd5c2dc0bf2ceee067acadb1b86c8731d04a50fd4a6c649c13ca858a5

    • SHA512

      31172c052f05bddc23a129fc15feff4a03ff3f1f59d4c6c03d73a2b77040e80ebcc562e7fa07f2776752580c2e3f883c50be714d57345ee0a3927620a06b9c60

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01QaT:z6a+CdOOtEvwDpjcz5

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks