Overview

overview

10

Static

static

10

2024-02-27...er.exe

windows7-x64

9

2024-02-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-27_238935d558251a9b0f8f06d99763dc9a_cryptolocker

  • Size

    101KB

  • Sample

    240227-swtvxsch2z

  • MD5

    238935d558251a9b0f8f06d99763dc9a

  • SHA1

    b55127b15a8836e26a83536ea4201c078e212b33

  • SHA256

    2547f9e678acc517dbee4b6cc7428bd1da282e6a2223079938dc914e1d3c2ca5

  • SHA512

    985dabef1837115681fa9b896af0df486db297510a189b12a517851be05ef3a2ccba6e363c811dfdca99a09d81b641da97c5babb014591e98f3f2605958ed505

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixg:AnBdOOtEvwDpj6zz

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-27_238935d558251a9b0f8f06d99763dc9a_cryptolocker

    • Size

      101KB

    • MD5

      238935d558251a9b0f8f06d99763dc9a

    • SHA1

      b55127b15a8836e26a83536ea4201c078e212b33

    • SHA256

      2547f9e678acc517dbee4b6cc7428bd1da282e6a2223079938dc914e1d3c2ca5

    • SHA512

      985dabef1837115681fa9b896af0df486db297510a189b12a517851be05ef3a2ccba6e363c811dfdca99a09d81b641da97c5babb014591e98f3f2605958ed505

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixg:AnBdOOtEvwDpj6zz

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks