Overview

overview

10

Static

static

10

2024-04-26...er.exe

windows7-x64

9

2024-04-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-26_fbf7b8ba9b3a8e3133086290bfbe15f1_cryptolocker

  • Size

    55KB

  • Sample

    240426-fzhwlsac97

  • MD5

    fbf7b8ba9b3a8e3133086290bfbe15f1

  • SHA1

    ca0bfb8970aa825ce1fc40cc69f3d112fd5a50e9

  • SHA256

    cb453a43bd7679ec7f5c5f2d1c4322f6449f0ba6a632ade525afeb7f2381b6a7

  • SHA512

    83578ab12899a0c905bfc467bcc9dbf3dfb1b678f80192ce39063bf4c7e1b7389551b18d6f368a765247cbb08e444258c7e869e769d554fd6cc9b984576b34f3

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjll:bP9g/xtCS3Dxx0y

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-26_fbf7b8ba9b3a8e3133086290bfbe15f1_cryptolocker

    • Size

      55KB

    • MD5

      fbf7b8ba9b3a8e3133086290bfbe15f1

    • SHA1

      ca0bfb8970aa825ce1fc40cc69f3d112fd5a50e9

    • SHA256

      cb453a43bd7679ec7f5c5f2d1c4322f6449f0ba6a632ade525afeb7f2381b6a7

    • SHA512

      83578ab12899a0c905bfc467bcc9dbf3dfb1b678f80192ce39063bf4c7e1b7389551b18d6f368a765247cbb08e444258c7e869e769d554fd6cc9b984576b34f3

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjll:bP9g/xtCS3Dxx0y

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks