Overview

overview

10

Static

static

10

2024-04-18...er.exe

windows7-x64

9

2024-04-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-18_72f3158e0f485938bcb8854cd3138672_cryptolocker

  • Size

    88KB

  • Sample

    240418-b1jgbagf9s

  • MD5

    72f3158e0f485938bcb8854cd3138672

  • SHA1

    7b96d6a2d726c46007b8501bc31fa8adcc5641e6

  • SHA256

    dfa52d50f924ad72a95f674e549f59b0d4a3c0e9af487853a51693b2f474a69a

  • SHA512

    ca65ab6118fa66de996edefb18c252452896de8f98bbb090d81e16ae2d771e6b9557061dcfe04fb74257e6d8bddbd62ef66aeff7341b8061ab7107a71b0f2deb

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAK:n6a+1SEOtEvwDpjYYvQd2PB

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-18_72f3158e0f485938bcb8854cd3138672_cryptolocker

    • Size

      88KB

    • MD5

      72f3158e0f485938bcb8854cd3138672

    • SHA1

      7b96d6a2d726c46007b8501bc31fa8adcc5641e6

    • SHA256

      dfa52d50f924ad72a95f674e549f59b0d4a3c0e9af487853a51693b2f474a69a

    • SHA512

      ca65ab6118fa66de996edefb18c252452896de8f98bbb090d81e16ae2d771e6b9557061dcfe04fb74257e6d8bddbd62ef66aeff7341b8061ab7107a71b0f2deb

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAK:n6a+1SEOtEvwDpjYYvQd2PB

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks