Overview

overview

10

Static

static

10

2024-02-21...er.exe

windows7-x64

9

2024-02-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-21_453a69d12875a889de3411dd55f4a264_cryptolocker

  • Size

    87KB

  • Sample

    240221-p2ljysga57

  • MD5

    453a69d12875a889de3411dd55f4a264

  • SHA1

    2a1288c9a7995e41c07d7155f3a7ba191bf4a494

  • SHA256

    95508f517e09b09d8d4ad12c6bdeb15a6fa2cc3f95b126d11fe2d5f5e4c2e96d

  • SHA512

    3a7dfdc7b8ed5bdcfb0b377fc93ebd241a17b3f63da27f85ab8932f918ef586811a97a72fe48b569a3ec52fcabfebec6aa871779d83075bee649d898f2579fbf

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLk:AnBdOOtEvwDpj6zM

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-21_453a69d12875a889de3411dd55f4a264_cryptolocker

    • Size

      87KB

    • MD5

      453a69d12875a889de3411dd55f4a264

    • SHA1

      2a1288c9a7995e41c07d7155f3a7ba191bf4a494

    • SHA256

      95508f517e09b09d8d4ad12c6bdeb15a6fa2cc3f95b126d11fe2d5f5e4c2e96d

    • SHA512

      3a7dfdc7b8ed5bdcfb0b377fc93ebd241a17b3f63da27f85ab8932f918ef586811a97a72fe48b569a3ec52fcabfebec6aa871779d83075bee649d898f2579fbf

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLk:AnBdOOtEvwDpj6zM

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks