Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_e9f0623e0be171e84d465ed51bd4a6fd_cryptolocker

  • Size

    122KB

  • Sample

    240212-whh32sag6y

  • MD5

    e9f0623e0be171e84d465ed51bd4a6fd

  • SHA1

    133342d2e4c3a817406f73d32cc31d033f625e46

  • SHA256

    dd2699a0fd719911783f9fc04c52b665773ea033eac43ea397f2a83be726dcf4

  • SHA512

    be73f9d18a3029cd984ea30ed4ba5c5e8d7b6c2dcef0d83ee39d348037ba7ba9a53ec7064bb0279fccc1cacb232ecdd3d0e218eea948116166fadc7c8f4c7251

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgpwqWsviy6b:z6a+CdOOtEvwDpjczH

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-12_e9f0623e0be171e84d465ed51bd4a6fd_cryptolocker

    • Size

      122KB

    • MD5

      e9f0623e0be171e84d465ed51bd4a6fd

    • SHA1

      133342d2e4c3a817406f73d32cc31d033f625e46

    • SHA256

      dd2699a0fd719911783f9fc04c52b665773ea033eac43ea397f2a83be726dcf4

    • SHA512

      be73f9d18a3029cd984ea30ed4ba5c5e8d7b6c2dcef0d83ee39d348037ba7ba9a53ec7064bb0279fccc1cacb232ecdd3d0e218eea948116166fadc7c8f4c7251

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgpwqWsviy6b:z6a+CdOOtEvwDpjczH

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks