Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_46ae2721772af6cec23a00ab80ad77da_cryptolocker

  • Size

    70KB

  • Sample

    240315-x95lssbb67

  • MD5

    46ae2721772af6cec23a00ab80ad77da

  • SHA1

    ed0c02c6fe59d6edd0ff4979aa0b7bd0a7fc57f4

  • SHA256

    b4de9dd14678a1f31ff65fae40b0500dd350b5048e52f40b496e24da0c322108

  • SHA512

    e9c6416cf0cb729d567cd901399f2c9a18f856e0bdd91c2b3af7ba7a5ee88bbd638a2aff8669f6102e2160b336fb8a2b57c6a445ab5b64c1b63a46583cca1b4a

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeB+3h:z6a+CdOOtEvwDpjQi

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-15_46ae2721772af6cec23a00ab80ad77da_cryptolocker

    • Size

      70KB

    • MD5

      46ae2721772af6cec23a00ab80ad77da

    • SHA1

      ed0c02c6fe59d6edd0ff4979aa0b7bd0a7fc57f4

    • SHA256

      b4de9dd14678a1f31ff65fae40b0500dd350b5048e52f40b496e24da0c322108

    • SHA512

      e9c6416cf0cb729d567cd901399f2c9a18f856e0bdd91c2b3af7ba7a5ee88bbd638a2aff8669f6102e2160b336fb8a2b57c6a445ab5b64c1b63a46583cca1b4a

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeB+3h:z6a+CdOOtEvwDpjQi

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks