Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-19_a10940cc8a9ca8c2aabaeff2c3dcbd93_cryptolocker

  • Size

    86KB

  • Sample

    240319-pwffrada9z

  • MD5

    a10940cc8a9ca8c2aabaeff2c3dcbd93

  • SHA1

    eaf203b5f6a351e6a8789a5178bc1a7d8e42060c

  • SHA256

    d04ba556384762cf2d9dd8d1de97afe6810259ad48d8ef4677dec4297be9e1ef

  • SHA512

    eaa4cf418dbd40d4811178e50d01cffd9bbf0a06863de21f00ca15f2435a345e52428da027af5e5de12fb009330f2c80a6d199686a18f379ade207c00b190d92

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIEkpi:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgd

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-19_a10940cc8a9ca8c2aabaeff2c3dcbd93_cryptolocker

    • Size

      86KB

    • MD5

      a10940cc8a9ca8c2aabaeff2c3dcbd93

    • SHA1

      eaf203b5f6a351e6a8789a5178bc1a7d8e42060c

    • SHA256

      d04ba556384762cf2d9dd8d1de97afe6810259ad48d8ef4677dec4297be9e1ef

    • SHA512

      eaa4cf418dbd40d4811178e50d01cffd9bbf0a06863de21f00ca15f2435a345e52428da027af5e5de12fb009330f2c80a6d199686a18f379ade207c00b190d92

    • SSDEEP

      768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIEkpi:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgd

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks