Overview

overview

10

Static

static

10

2024-04-20...er.exe

windows7-x64

9

2024-04-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-20_301cb976e20cdfbfd6864bb2ea6077a0_cryptolocker

  • Size

    40KB

  • Sample

    240420-1ajrtsah6y

  • MD5

    301cb976e20cdfbfd6864bb2ea6077a0

  • SHA1

    fc956658bded69673746a67ffc1695177f4625ec

  • SHA256

    0d8a06b1e809de507ec7f20d1f604d6cdded9292fd6c89ad22c15a50f5f716fc

  • SHA512

    8ac79d6e3ad9070b8d68ee93e713560b84c22db6037157da2059e687f262c47cb2cf3d6d048f09c4e5d6659ae9503d88a6b3601da464bb5e964e75cee0e788a2

  • SSDEEP

    384:ba74uGLLQRcsdeQ72ngEr4K7YmE8j6CQYnrz1ZhdaXFXSCVQTLfjDpXqxKH2:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKW

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-20_301cb976e20cdfbfd6864bb2ea6077a0_cryptolocker

    • Size

      40KB

    • MD5

      301cb976e20cdfbfd6864bb2ea6077a0

    • SHA1

      fc956658bded69673746a67ffc1695177f4625ec

    • SHA256

      0d8a06b1e809de507ec7f20d1f604d6cdded9292fd6c89ad22c15a50f5f716fc

    • SHA512

      8ac79d6e3ad9070b8d68ee93e713560b84c22db6037157da2059e687f262c47cb2cf3d6d048f09c4e5d6659ae9503d88a6b3601da464bb5e964e75cee0e788a2

    • SSDEEP

      384:ba74uGLLQRcsdeQ72ngEr4K7YmE8j6CQYnrz1ZhdaXFXSCVQTLfjDpXqxKH2:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKW

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks