Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_fd6d598ac31b3092ad66a27fde7ec16a_cryptolocker

  • Size

    69KB

  • Sample

    240129-ff57ssade9

  • MD5

    fd6d598ac31b3092ad66a27fde7ec16a

  • SHA1

    00be99879651fb078ee3ba8df96d7162b30cd0cb

  • SHA256

    b976cac8070f77b38e78877e68ce8dc9e6ef4826bd4ec477d4379304082ef46c

  • SHA512

    9cbf8ef046117239800c976aa7e43c1b09740a2d01089984114c5c8a7392005fce866e5f1fbc2ad7c8a7548257ba8fadef8471f09cb8472ee3773c8471335070

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeBQ:z6a+CdOOtEvwDpjQ+

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-29_fd6d598ac31b3092ad66a27fde7ec16a_cryptolocker

    • Size

      69KB

    • MD5

      fd6d598ac31b3092ad66a27fde7ec16a

    • SHA1

      00be99879651fb078ee3ba8df96d7162b30cd0cb

    • SHA256

      b976cac8070f77b38e78877e68ce8dc9e6ef4826bd4ec477d4379304082ef46c

    • SHA512

      9cbf8ef046117239800c976aa7e43c1b09740a2d01089984114c5c8a7392005fce866e5f1fbc2ad7c8a7548257ba8fadef8471f09cb8472ee3773c8471335070

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeBQ:z6a+CdOOtEvwDpjQ+

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks