Overview

overview

10

Static

static

10

2024-04-24...er.exe

windows7-x64

9

2024-04-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-24_ecfb83749fde172ae500e6b6b72b680d_cryptolocker

  • Size

    65KB

  • Sample

    240424-s3bb6acf7x

  • MD5

    ecfb83749fde172ae500e6b6b72b680d

  • SHA1

    8027dcfc8147d8801691de11aea81d07e1cfe0be

  • SHA256

    fccae9e13a346d19b1ab5959e9b6ae9543a4a9ec6db725583b86557296b3d550

  • SHA512

    eccff08f3a0356eef3693c24d778e3a0d4076fe78eada6c53cb3d120a712c236816916846c1963675ee9c3bc7e85f9c032672684afa1cbdf98e6682274a6cdba

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5k5Bl:zj+soPSMOtEvwDpj4kpmeLmQ/l

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-24_ecfb83749fde172ae500e6b6b72b680d_cryptolocker

    • Size

      65KB

    • MD5

      ecfb83749fde172ae500e6b6b72b680d

    • SHA1

      8027dcfc8147d8801691de11aea81d07e1cfe0be

    • SHA256

      fccae9e13a346d19b1ab5959e9b6ae9543a4a9ec6db725583b86557296b3d550

    • SHA512

      eccff08f3a0356eef3693c24d778e3a0d4076fe78eada6c53cb3d120a712c236816916846c1963675ee9c3bc7e85f9c032672684afa1cbdf98e6682274a6cdba

    • SSDEEP

      768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5k5Bl:zj+soPSMOtEvwDpj4kpmeLmQ/l

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks