Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_c6aad06f8e6317e4da02c30bdeb4c9c4_cryptolocker

  • Size

    91KB

  • Sample

    240204-mp91nsfdf9

  • MD5

    c6aad06f8e6317e4da02c30bdeb4c9c4

  • SHA1

    3c5519059610674e7eb5e74c807de0383998b382

  • SHA256

    62b1412ef62cc0585bd74a265421203fe26831172e3e1095a9cd67c43d93de44

  • SHA512

    3984b46ebd9c1d64c0932784a5329e74b6c7c005fe44671f07bbddd4180b9b6374d00d55a192dfaf6e902358a023519663d20cd5c4e3ad34384fd30153b6a054

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/D:zCsanOtEvwDpjBD

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-04_c6aad06f8e6317e4da02c30bdeb4c9c4_cryptolocker

    • Size

      91KB

    • MD5

      c6aad06f8e6317e4da02c30bdeb4c9c4

    • SHA1

      3c5519059610674e7eb5e74c807de0383998b382

    • SHA256

      62b1412ef62cc0585bd74a265421203fe26831172e3e1095a9cd67c43d93de44

    • SHA512

      3984b46ebd9c1d64c0932784a5329e74b6c7c005fe44671f07bbddd4180b9b6374d00d55a192dfaf6e902358a023519663d20cd5c4e3ad34384fd30153b6a054

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/D:zCsanOtEvwDpjBD

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks