Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-19_a1ada2e82e174a2b9ad0c76abf19643b_cryptolocker

  • Size

    127KB

  • Sample

    240319-yjpnbsee3v

  • MD5

    a1ada2e82e174a2b9ad0c76abf19643b

  • SHA1

    ebe352546ef41937fb5793a1a239f88d46034227

  • SHA256

    07f60a9fb44d678daafb2d2fc3466d90294bc498c8433c673b9cf2994107783b

  • SHA512

    e9da2448ba5efe3ae1d046ca351f870703da38c9b474481d3e7a6ca367719a0139c6d9e8a8e2f08ac6b652afe89fabbaa3f371d629ca080fa1e5cc01ee844ad0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebqU:AnBdOOtEvwDpj6zL

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-19_a1ada2e82e174a2b9ad0c76abf19643b_cryptolocker

    • Size

      127KB

    • MD5

      a1ada2e82e174a2b9ad0c76abf19643b

    • SHA1

      ebe352546ef41937fb5793a1a239f88d46034227

    • SHA256

      07f60a9fb44d678daafb2d2fc3466d90294bc498c8433c673b9cf2994107783b

    • SHA512

      e9da2448ba5efe3ae1d046ca351f870703da38c9b474481d3e7a6ca367719a0139c6d9e8a8e2f08ac6b652afe89fabbaa3f371d629ca080fa1e5cc01ee844ad0

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebqU:AnBdOOtEvwDpj6zL

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks