Overview

overview

10

Static

static

10

2024-04-26...er.exe

windows7-x64

9

2024-04-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-26_adf33d948965f7a2de17e09ae288ba60_cryptolocker

  • Size

    50KB

  • Sample

    240426-3fpw5sec59

  • MD5

    adf33d948965f7a2de17e09ae288ba60

  • SHA1

    5bc3db57a895517072856ac2983c97f77887d509

  • SHA256

    7759a726f3a16f2793d1fc02975895750a9bc7edf7a7b6d15fd794e2c9d7790c

  • SHA512

    8490b9eadb6e8f2c8b592b6dae8bc1c9800569c37b419359995686c7dc0a5023fab42723c93384c5977937a7aff651a94aad0ca3050512fd8fc92ae51a524417

  • SSDEEP

    768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvt1:bODOw9acifAoc+v1

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-26_adf33d948965f7a2de17e09ae288ba60_cryptolocker

    • Size

      50KB

    • MD5

      adf33d948965f7a2de17e09ae288ba60

    • SHA1

      5bc3db57a895517072856ac2983c97f77887d509

    • SHA256

      7759a726f3a16f2793d1fc02975895750a9bc7edf7a7b6d15fd794e2c9d7790c

    • SHA512

      8490b9eadb6e8f2c8b592b6dae8bc1c9800569c37b419359995686c7dc0a5023fab42723c93384c5977937a7aff651a94aad0ca3050512fd8fc92ae51a524417

    • SSDEEP

      768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvt1:bODOw9acifAoc+v1

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks