Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-29_69c43f6cd96a4eaea9225fbbab6c6a52_cryptolocker

  • Size

    73KB

  • Sample

    240129-qp1c1sage9

  • MD5

    69c43f6cd96a4eaea9225fbbab6c6a52

  • SHA1

    3513b0cdb4a5126f8ee26709fd7b04861d2705e0

  • SHA256

    cf7ec40629db507648c95d4cc78f4e97fb8f7fe1f07962b1083e731dbd1db514

  • SHA512

    c08e01571e094007dd48e93018102ce7565752099cbadaa876a4ff3f4e7806a50aae6f539505290c00861d89d5b3a74e3dbc560d354b2d153cd00985279b6f89

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBd/Lw:T6a+rdOOtEvwDpjNt+

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-29_69c43f6cd96a4eaea9225fbbab6c6a52_cryptolocker

    • Size

      73KB

    • MD5

      69c43f6cd96a4eaea9225fbbab6c6a52

    • SHA1

      3513b0cdb4a5126f8ee26709fd7b04861d2705e0

    • SHA256

      cf7ec40629db507648c95d4cc78f4e97fb8f7fe1f07962b1083e731dbd1db514

    • SHA512

      c08e01571e094007dd48e93018102ce7565752099cbadaa876a4ff3f4e7806a50aae6f539505290c00861d89d5b3a74e3dbc560d354b2d153cd00985279b6f89

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBd/Lw:T6a+rdOOtEvwDpjNt+

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks