Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-19_725233a834558b544c8273a6eec30c50_cryptolocker

  • Size

    66KB

  • Sample

    240319-t7xlmahd8v

  • MD5

    725233a834558b544c8273a6eec30c50

  • SHA1

    8874d2d258badc480db3445d1e1e9f58dfd1947b

  • SHA256

    2b298c1c1dd81a622c5ad20c84a3799e9c44c82e9e90f1871eb0c35fb4ff3d08

  • SHA512

    ad534dc0867d1c22c73909a50c3a306ab2a2aeb395d4c327bfdb19411f5d5ce20030524ff044e910067b2b614a7e8c714bdff7400514a3a3e23b9b7d96a5eef7

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUa1Fc:T6a+rdOOtEvwDpjN8

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-19_725233a834558b544c8273a6eec30c50_cryptolocker

    • Size

      66KB

    • MD5

      725233a834558b544c8273a6eec30c50

    • SHA1

      8874d2d258badc480db3445d1e1e9f58dfd1947b

    • SHA256

      2b298c1c1dd81a622c5ad20c84a3799e9c44c82e9e90f1871eb0c35fb4ff3d08

    • SHA512

      ad534dc0867d1c22c73909a50c3a306ab2a2aeb395d4c327bfdb19411f5d5ce20030524ff044e910067b2b614a7e8c714bdff7400514a3a3e23b9b7d96a5eef7

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUa1Fc:T6a+rdOOtEvwDpjN8

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks