Overview

overview

10

Static

static

10

2024-04-22...er.exe

windows7-x64

9

2024-04-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-22_3dc84e925ad6162f7d361e8daca3d91d_cryptolocker

  • Size

    96KB

  • Sample

    240422-jg9s6ahb3w

  • MD5

    3dc84e925ad6162f7d361e8daca3d91d

  • SHA1

    18da8f2230b76752df1077edc56023fdf89dccfd

  • SHA256

    cd5a6a12096b47efacb5b480862bfc743b31779d7bcb89177c600e52de16abd9

  • SHA512

    fbb27c7b0fc2b54f8cf6da9d46b079c864c63dc071790a3f236068b8e053d2edbcf10b13097b2de98b9dc6514ab2534339af737204d95b2288e9eccaae530832

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bM:zCsanOtEvwDpjB4

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-22_3dc84e925ad6162f7d361e8daca3d91d_cryptolocker

    • Size

      96KB

    • MD5

      3dc84e925ad6162f7d361e8daca3d91d

    • SHA1

      18da8f2230b76752df1077edc56023fdf89dccfd

    • SHA256

      cd5a6a12096b47efacb5b480862bfc743b31779d7bcb89177c600e52de16abd9

    • SHA512

      fbb27c7b0fc2b54f8cf6da9d46b079c864c63dc071790a3f236068b8e053d2edbcf10b13097b2de98b9dc6514ab2534339af737204d95b2288e9eccaae530832

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bM:zCsanOtEvwDpjB4

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks