Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-27_c0070e9cdfd74d5fa4eb53d36c1a398b_cryptolocker

  • Size

    82KB

  • Sample

    240127-jca42afgf8

  • MD5

    c0070e9cdfd74d5fa4eb53d36c1a398b

  • SHA1

    73dff3e2108ceb22a6fd1ab0a3b63a8c044ef6aa

  • SHA256

    729b880e8af6eaa850c93c5fce135944779cb2a24c3318df21c478fde7331ca7

  • SHA512

    432595c42f121a9e7cf48e03ebe4cfa109d2ee0976f5ab4d844c312ef177def2cb697539b587317dabf38632a5e0cbf4a5c96d2b98da42e9e72a187fc6a916d6

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS18:zCsanOtEvwDpjC

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-27_c0070e9cdfd74d5fa4eb53d36c1a398b_cryptolocker

    • Size

      82KB

    • MD5

      c0070e9cdfd74d5fa4eb53d36c1a398b

    • SHA1

      73dff3e2108ceb22a6fd1ab0a3b63a8c044ef6aa

    • SHA256

      729b880e8af6eaa850c93c5fce135944779cb2a24c3318df21c478fde7331ca7

    • SHA512

      432595c42f121a9e7cf48e03ebe4cfa109d2ee0976f5ab4d844c312ef177def2cb697539b587317dabf38632a5e0cbf4a5c96d2b98da42e9e72a187fc6a916d6

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS18:zCsanOtEvwDpjC

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks