Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-09_0ac90893d4ff2edf787adb7733b0b9c1_cryptolocker

  • Size

    21KB

  • Sample

    240409-h73xvshd69

  • MD5

    0ac90893d4ff2edf787adb7733b0b9c1

  • SHA1

    a0f1ed6a3ac8b159f0d1cf53213ef1050df9dcb3

  • SHA256

    5e4427f1766a4c63591a525209b96d2b90f35eb89ae0219294e80abb5eaebdfb

  • SHA512

    07d8dc607591b07254733b149843ae8fc3f1d9d536528c8617a3d8743ad7fbe78a9b738504f26bebd66aef475a44556e463b10c8b7f574bd559d7d795b4a99a0

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp8:bVCPwFRo6CpwXFXSqQXfju

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-09_0ac90893d4ff2edf787adb7733b0b9c1_cryptolocker

    • Size

      21KB

    • MD5

      0ac90893d4ff2edf787adb7733b0b9c1

    • SHA1

      a0f1ed6a3ac8b159f0d1cf53213ef1050df9dcb3

    • SHA256

      5e4427f1766a4c63591a525209b96d2b90f35eb89ae0219294e80abb5eaebdfb

    • SHA512

      07d8dc607591b07254733b149843ae8fc3f1d9d536528c8617a3d8743ad7fbe78a9b738504f26bebd66aef475a44556e463b10c8b7f574bd559d7d795b4a99a0

    • SSDEEP

      384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp8:bVCPwFRo6CpwXFXSqQXfju

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks