Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-22_a021ee7d43c669b529eed1c84d311042_cryptolocker

  • Size

    93KB

  • Sample

    240222-hj6nvadg2v

  • MD5

    a021ee7d43c669b529eed1c84d311042

  • SHA1

    26b0153a166aefa1e0ee097a6aa2ab296e656e51

  • SHA256

    c2ff29f33a475cb78209f3c7dfacf495cd39760b515d3c59a542f219dfd600b9

  • SHA512

    130689c18b501613a3dac6277f45b70bea29161705c84f17418a9b17c9bc7a83cdbbae9000712310b4207ff1f60701a4acf0a766e52bb3ed8cd37be8297526b0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYB:AnBdOOtEvwDpj6z/

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-22_a021ee7d43c669b529eed1c84d311042_cryptolocker

    • Size

      93KB

    • MD5

      a021ee7d43c669b529eed1c84d311042

    • SHA1

      26b0153a166aefa1e0ee097a6aa2ab296e656e51

    • SHA256

      c2ff29f33a475cb78209f3c7dfacf495cd39760b515d3c59a542f219dfd600b9

    • SHA512

      130689c18b501613a3dac6277f45b70bea29161705c84f17418a9b17c9bc7a83cdbbae9000712310b4207ff1f60701a4acf0a766e52bb3ed8cd37be8297526b0

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYB:AnBdOOtEvwDpj6z/

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks