Overview

overview

10

Static

static

10

2024-04-18...er.exe

windows7-x64

9

2024-04-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-18_9e4d9982bf2b82987ae1471930a66d7b_cryptolocker

  • Size

    69KB

  • Sample

    240418-fl3zmada6z

  • MD5

    9e4d9982bf2b82987ae1471930a66d7b

  • SHA1

    8abc2d718f51e17bf6b1cdad99212527a395a7dc

  • SHA256

    7951e316f9e948c23eead5a862cc273aff82bc0cb569a91ca7c3293729110c16

  • SHA512

    7537b51d7a720b4e32354ad52a51d6da7252dfbd2150ce87049b7c032a6e5da2f656f8e47a11f3b1cdc0c18042ecd2fdd94381242f9b70b2eb667a191a7d153d

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9/:C4Q2c94OtEvwDpj4H8zK

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-18_9e4d9982bf2b82987ae1471930a66d7b_cryptolocker

    • Size

      69KB

    • MD5

      9e4d9982bf2b82987ae1471930a66d7b

    • SHA1

      8abc2d718f51e17bf6b1cdad99212527a395a7dc

    • SHA256

      7951e316f9e948c23eead5a862cc273aff82bc0cb569a91ca7c3293729110c16

    • SHA512

      7537b51d7a720b4e32354ad52a51d6da7252dfbd2150ce87049b7c032a6e5da2f656f8e47a11f3b1cdc0c18042ecd2fdd94381242f9b70b2eb667a191a7d153d

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9/:C4Q2c94OtEvwDpj4H8zK

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks