Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_d923d9570be95c9da55eda369b5ceef4_cryptolocker

  • Size

    80KB

  • Sample

    240328-n3jajsbg81

  • MD5

    d923d9570be95c9da55eda369b5ceef4

  • SHA1

    23d4667c311436ce9263e9cf9bf66350e829ffa1

  • SHA256

    1a0950b696affe85af0e7f8bc9aee42d6db6f4ef95f5499f7a32dfa4c94ead1c

  • SHA512

    56c74493ccf3b0968e35bdf93388f36a9dd767ba6ece7f3e7f651a49db2029491b7e40eec4cc8cf06c9c52dd29fbd1dc379593007e4769570a06ba12a4eb8735

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdp:T6a+rdOOtEvwDpjNtv

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-28_d923d9570be95c9da55eda369b5ceef4_cryptolocker

    • Size

      80KB

    • MD5

      d923d9570be95c9da55eda369b5ceef4

    • SHA1

      23d4667c311436ce9263e9cf9bf66350e829ffa1

    • SHA256

      1a0950b696affe85af0e7f8bc9aee42d6db6f4ef95f5499f7a32dfa4c94ead1c

    • SHA512

      56c74493ccf3b0968e35bdf93388f36a9dd767ba6ece7f3e7f651a49db2029491b7e40eec4cc8cf06c9c52dd29fbd1dc379593007e4769570a06ba12a4eb8735

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdp:T6a+rdOOtEvwDpjNtv

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks