Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_be2be8ac43198435261e5908f8fd0b87_cryptolocker

  • Size

    81KB

  • Sample

    240222-f5gwhach44

  • MD5

    be2be8ac43198435261e5908f8fd0b87

  • SHA1

    4cdcb97a517471b43c335bc2deec7dae1ca6a134

  • SHA256

    3b1dfb973b00716f5e63a3c04e1a73defd4b81d725df138d12aa4c2d14fe012c

  • SHA512

    df4a0ddc91df4d57a5b9b85759d4057a6ca26c3db42220ea18fc3a787729e2dc46d61d92ab8f610a547f768498390349df25c1ddfdad300ee91083529f3b3972

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7WlW:T6a+rdOOtEvwDpjNR

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-22_be2be8ac43198435261e5908f8fd0b87_cryptolocker

    • Size

      81KB

    • MD5

      be2be8ac43198435261e5908f8fd0b87

    • SHA1

      4cdcb97a517471b43c335bc2deec7dae1ca6a134

    • SHA256

      3b1dfb973b00716f5e63a3c04e1a73defd4b81d725df138d12aa4c2d14fe012c

    • SHA512

      df4a0ddc91df4d57a5b9b85759d4057a6ca26c3db42220ea18fc3a787729e2dc46d61d92ab8f610a547f768498390349df25c1ddfdad300ee91083529f3b3972

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7WlW:T6a+rdOOtEvwDpjNR

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks