Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-18_8c962f26ad5b6e4e4f1daac770b5f794_cryptolocker

  • Size

    88KB

  • Sample

    240318-w92dpsfc76

  • MD5

    8c962f26ad5b6e4e4f1daac770b5f794

  • SHA1

    30bbc9d2d9da18f1d095527d44827fd27ca7e40e

  • SHA256

    a77f057f37d9a7df6820381a640ab4908adb4eaa8f55b084947d8c16e3d3758a

  • SHA512

    3679708f2363e510c9dfa854f2e87a50c04ff4c5cecb9b411c169b37224ab7443db03d261ea682c93bb41a4e0686d7ff35c4f8af5475cd32e9f8d0afb4902b4c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdVT+:AnBdOOtEvwDpj6zzC

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-18_8c962f26ad5b6e4e4f1daac770b5f794_cryptolocker

    • Size

      88KB

    • MD5

      8c962f26ad5b6e4e4f1daac770b5f794

    • SHA1

      30bbc9d2d9da18f1d095527d44827fd27ca7e40e

    • SHA256

      a77f057f37d9a7df6820381a640ab4908adb4eaa8f55b084947d8c16e3d3758a

    • SHA512

      3679708f2363e510c9dfa854f2e87a50c04ff4c5cecb9b411c169b37224ab7443db03d261ea682c93bb41a4e0686d7ff35c4f8af5475cd32e9f8d0afb4902b4c

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdVT+:AnBdOOtEvwDpj6zzC

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks