Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_fd4b47312beb79ad78fe75d8ccd589fe_cryptolocker

  • Size

    56KB

  • Sample

    240312-a1qpysah9w

  • MD5

    fd4b47312beb79ad78fe75d8ccd589fe

  • SHA1

    ab6fd80780032d01e4d823ac581ebcefb0a20809

  • SHA256

    b843bb066756b44aaa7b6d79587604f7095a54a2afcdf113e3d341aecd88ac80

  • SHA512

    fc8b8baf901a440b4374d2dcf712a4e5325599cc820cc9857d46a10cb4a3b2d8b7e89ff3e9a30cd3073ad353a73e627b7c876f7fa0b3ce0daf0e494d8027c599

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax8iHn:z6QFElP6n+gKmddpMOtEvwDpj9aYa9n

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-12_fd4b47312beb79ad78fe75d8ccd589fe_cryptolocker

    • Size

      56KB

    • MD5

      fd4b47312beb79ad78fe75d8ccd589fe

    • SHA1

      ab6fd80780032d01e4d823ac581ebcefb0a20809

    • SHA256

      b843bb066756b44aaa7b6d79587604f7095a54a2afcdf113e3d341aecd88ac80

    • SHA512

      fc8b8baf901a440b4374d2dcf712a4e5325599cc820cc9857d46a10cb4a3b2d8b7e89ff3e9a30cd3073ad353a73e627b7c876f7fa0b3ce0daf0e494d8027c599

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax8iHn:z6QFElP6n+gKmddpMOtEvwDpj9aYa9n

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks