Overview

overview

10

Static

static

10

2024-03-11...er.exe

windows7-x64

9

2024-03-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-11_8998aff597c3c18deb18b3adda0fe750_cryptolocker

  • Size

    87KB

  • Sample

    240311-arz72aff5w

  • MD5

    8998aff597c3c18deb18b3adda0fe750

  • SHA1

    9f51cf368bfddfb6a2402405300b284450fc1bbc

  • SHA256

    1b43610dad0802916cf523e34a158ce94e879bef8ffd6a4be9fced53a49b6752

  • SHA512

    b4c6b3fa783fb07d7c8711065c2c3c73cd2185d4134ec7d4c82c5ee4c390348df8f2b7ca73ec6ac35bbe2731ce13dd977f7630936db19a9d43be2fdd4d2d1b1e

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/P:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgC

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-11_8998aff597c3c18deb18b3adda0fe750_cryptolocker

    • Size

      87KB

    • MD5

      8998aff597c3c18deb18b3adda0fe750

    • SHA1

      9f51cf368bfddfb6a2402405300b284450fc1bbc

    • SHA256

      1b43610dad0802916cf523e34a158ce94e879bef8ffd6a4be9fced53a49b6752

    • SHA512

      b4c6b3fa783fb07d7c8711065c2c3c73cd2185d4134ec7d4c82c5ee4c390348df8f2b7ca73ec6ac35bbe2731ce13dd977f7630936db19a9d43be2fdd4d2d1b1e

    • SSDEEP

      768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/P:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgC

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks