Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-25_a09177133ae3438371f5927a2cab4973_cryptolocker

  • Size

    86KB

  • Sample

    240125-r5228ahec4

  • MD5

    a09177133ae3438371f5927a2cab4973

  • SHA1

    e12d09e9a1d3e5609f934d2870bc957297048a03

  • SHA256

    70a48ca5a8e8a501cf23c48575bfac64a1e3f7d4c6960484667ed996670334cf

  • SHA512

    e4e0ad8488cc85a4b3deddfc91f323cb3e470146beb51f38a3d26b2b612f9378e3c0cd0407665946810ae3fc6b89f22f646d32c518dda99cf6367f779054605d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6d:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-25_a09177133ae3438371f5927a2cab4973_cryptolocker

    • Size

      86KB

    • MD5

      a09177133ae3438371f5927a2cab4973

    • SHA1

      e12d09e9a1d3e5609f934d2870bc957297048a03

    • SHA256

      70a48ca5a8e8a501cf23c48575bfac64a1e3f7d4c6960484667ed996670334cf

    • SHA512

      e4e0ad8488cc85a4b3deddfc91f323cb3e470146beb51f38a3d26b2b612f9378e3c0cd0407665946810ae3fc6b89f22f646d32c518dda99cf6367f779054605d

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6d:AnBdOOtEvwDpj6zq

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks