Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-27_bc2cee8a3e15496640ea11985c997b57_cryptolocker

  • Size

    82KB

  • Sample

    240327-ge1flagh4v

  • MD5

    bc2cee8a3e15496640ea11985c997b57

  • SHA1

    20f4d2f563b4b5ba9557e9172d6a5b8ce1a85957

  • SHA256

    e9fe22a2fa678c5cc638e04d96ee0584c75b5f5ae42b3ab082d18e5ac56326af

  • SHA512

    5a2f3c028014c0a2d8a29763323714d84702ada2c212a0b66000ef61e2d5ea3bcf5034f5790ab0e839ac1483276366f0ee7cff57fcd4e1bdf957b5b6ef67f396

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1O:zCsanOtEvwDpjY

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-27_bc2cee8a3e15496640ea11985c997b57_cryptolocker

    • Size

      82KB

    • MD5

      bc2cee8a3e15496640ea11985c997b57

    • SHA1

      20f4d2f563b4b5ba9557e9172d6a5b8ce1a85957

    • SHA256

      e9fe22a2fa678c5cc638e04d96ee0584c75b5f5ae42b3ab082d18e5ac56326af

    • SHA512

      5a2f3c028014c0a2d8a29763323714d84702ada2c212a0b66000ef61e2d5ea3bcf5034f5790ab0e839ac1483276366f0ee7cff57fcd4e1bdf957b5b6ef67f396

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1O:zCsanOtEvwDpjY

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks