Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_ecf1412b0acafa4f9321c36d2c78932e_cryptolocker

  • Size

    92KB

  • Sample

    240328-bajz6acc4s

  • MD5

    ecf1412b0acafa4f9321c36d2c78932e

  • SHA1

    ecf1210e34a270579810ba057748fd852964fa71

  • SHA256

    d08b6afb287218bcb7a272f59272147e6b394d3cbf48a0ff02b8796905bb394b

  • SHA512

    eaf74c42123d7d1c5e147d6d37b8ff524fed976a3d36318b77efafb125168614b75d717d1055bb2616fa1be6adebd3a9444c46ee7fa6b5247e40933dd2570c7f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01n:AnBdOOtEvwDpj6zl

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-28_ecf1412b0acafa4f9321c36d2c78932e_cryptolocker

    • Size

      92KB

    • MD5

      ecf1412b0acafa4f9321c36d2c78932e

    • SHA1

      ecf1210e34a270579810ba057748fd852964fa71

    • SHA256

      d08b6afb287218bcb7a272f59272147e6b394d3cbf48a0ff02b8796905bb394b

    • SHA512

      eaf74c42123d7d1c5e147d6d37b8ff524fed976a3d36318b77efafb125168614b75d717d1055bb2616fa1be6adebd3a9444c46ee7fa6b5247e40933dd2570c7f

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01n:AnBdOOtEvwDpj6zl

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks