Overview

overview

10

Static

static

10

2024-02-18...er.exe

windows7-x64

9

2024-02-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-18_89b2b6fc3bd2da7208965d98e9e45c76_cryptolocker

  • Size

    101KB

  • Sample

    240218-jgdqqafh89

  • MD5

    89b2b6fc3bd2da7208965d98e9e45c76

  • SHA1

    386128858f1ad0271fd701003d8129701ac04ae6

  • SHA256

    a333b02e43c8d133286ace3b5325e8a91cb37277676dfbb5ba7f96c3051e8a37

  • SHA512

    9c3817531df9b620926fcbeabb3b84552da53fd0d5c58c1f3fccdbfb6b6d5748f61fc4d00f6898d8f70b65162e7fd1033be89114bf3ae41ddaedec07e6d1ba9f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixB:AnBdOOtEvwDpj6zm

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-18_89b2b6fc3bd2da7208965d98e9e45c76_cryptolocker

    • Size

      101KB

    • MD5

      89b2b6fc3bd2da7208965d98e9e45c76

    • SHA1

      386128858f1ad0271fd701003d8129701ac04ae6

    • SHA256

      a333b02e43c8d133286ace3b5325e8a91cb37277676dfbb5ba7f96c3051e8a37

    • SHA512

      9c3817531df9b620926fcbeabb3b84552da53fd0d5c58c1f3fccdbfb6b6d5748f61fc4d00f6898d8f70b65162e7fd1033be89114bf3ae41ddaedec07e6d1ba9f

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixB:AnBdOOtEvwDpj6zm

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks