Overview

overview

10

Static

static

10

2024-03-09...er.exe

windows7-x64

9

2024-03-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-09_51b4f3aaf3f3da156320478fc62d2d91_cryptolocker

  • Size

    63KB

  • Sample

    240309-szs3ssbh6z

  • MD5

    51b4f3aaf3f3da156320478fc62d2d91

  • SHA1

    f4127faee90a1aa654aba7e1f6b8f7e1c04150df

  • SHA256

    81b12b58a052a88bcdb45859d358f62ff91fc1cab076fec9bea5b3b42fecf61a

  • SHA512

    3250fa942d1ee281fbbabb7faeb77ab91649ec5e7fef8df1eecaf893e8d3e055f122feb845043e3c387a44f80d30a51f4e67731c413801abf86080260bfdcd8c

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY7DWjPy8:1nK6a+qdOOtEvwDpjT

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-09_51b4f3aaf3f3da156320478fc62d2d91_cryptolocker

    • Size

      63KB

    • MD5

      51b4f3aaf3f3da156320478fc62d2d91

    • SHA1

      f4127faee90a1aa654aba7e1f6b8f7e1c04150df

    • SHA256

      81b12b58a052a88bcdb45859d358f62ff91fc1cab076fec9bea5b3b42fecf61a

    • SHA512

      3250fa942d1ee281fbbabb7faeb77ab91649ec5e7fef8df1eecaf893e8d3e055f122feb845043e3c387a44f80d30a51f4e67731c413801abf86080260bfdcd8c

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY7DWjPy8:1nK6a+qdOOtEvwDpjT

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks