Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_a038ca4a42d53fe5942128fd72f5e5f0_cryptolocker

  • Size

    99KB

  • Sample

    240214-a6ejwada2v

  • MD5

    a038ca4a42d53fe5942128fd72f5e5f0

  • SHA1

    59048aa1c6a8f03fd3bfaa1d23ed7d7852cc178d

  • SHA256

    f14854673fc6a2f7232e669f617c8dbf582948c189f803a4a57ca6cd0b4c3a82

  • SHA512

    6b3467a5d41c163ab144260c3b06d5938909487df2bf1b5898df84250ee1bc84e75542af72e229079205567c3d6a0737345343761ea8d134275020e9f4803033

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBh:AnBdOOtEvwDpj6zi

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-14_a038ca4a42d53fe5942128fd72f5e5f0_cryptolocker

    • Size

      99KB

    • MD5

      a038ca4a42d53fe5942128fd72f5e5f0

    • SHA1

      59048aa1c6a8f03fd3bfaa1d23ed7d7852cc178d

    • SHA256

      f14854673fc6a2f7232e669f617c8dbf582948c189f803a4a57ca6cd0b4c3a82

    • SHA512

      6b3467a5d41c163ab144260c3b06d5938909487df2bf1b5898df84250ee1bc84e75542af72e229079205567c3d6a0737345343761ea8d134275020e9f4803033

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBh:AnBdOOtEvwDpj6zi

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks