Overview

overview

10

Static

static

10

2024-04-23...er.exe

windows7-x64

9

2024-04-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-23_efee26dfaa09dd1be10525b3d9683df6_cryptolocker

  • Size

    52KB

  • Sample

    240423-fnqgbadd78

  • MD5

    efee26dfaa09dd1be10525b3d9683df6

  • SHA1

    c9f8059ec28b5569b5bb758992cf7d250b16ca4e

  • SHA256

    721e0f56bc7c397c0bc1d84802ed2ce5dc84f492b53d1671a820769553315f8b

  • SHA512

    68f62e2dec475acd7cbaafb4a980258b08934ff3dff88a40632857fbbd6995e52a7c96139762cc24068198c038ab9c819be56249d8fcc56502a468dd49e7d8fd

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkg:z6QFElP6n+gKmddpMOtEvwDpj31ikg

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-23_efee26dfaa09dd1be10525b3d9683df6_cryptolocker

    • Size

      52KB

    • MD5

      efee26dfaa09dd1be10525b3d9683df6

    • SHA1

      c9f8059ec28b5569b5bb758992cf7d250b16ca4e

    • SHA256

      721e0f56bc7c397c0bc1d84802ed2ce5dc84f492b53d1671a820769553315f8b

    • SHA512

      68f62e2dec475acd7cbaafb4a980258b08934ff3dff88a40632857fbbd6995e52a7c96139762cc24068198c038ab9c819be56249d8fcc56502a468dd49e7d8fd

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkg:z6QFElP6n+gKmddpMOtEvwDpj31ikg

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks