Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-27_f84c030f32b902b3dd7bacb7c4a69060_cryptolocker

  • Size

    22KB

  • Sample

    240427-xsjb8see42

  • MD5

    f84c030f32b902b3dd7bacb7c4a69060

  • SHA1

    a618a22ee68bd95c742918334a6749056e0a941f

  • SHA256

    621a76e010da44a2ed48b1d5dd59f65c2c0a32ee6076393d4909cdd415f90253

  • SHA512

    353e6f13023cec677d5bf7346960e8f70fe3eb74df5ac4b69eddf1210d54a2ff5b965d0f4dc188af1d0829bb4c4218d8bafdc67bdc2712c65c4c95dd650e8db6

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HjI:bVCPwFRo6CpwXFXSqQXfjAU

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-27_f84c030f32b902b3dd7bacb7c4a69060_cryptolocker

    • Size

      22KB

    • MD5

      f84c030f32b902b3dd7bacb7c4a69060

    • SHA1

      a618a22ee68bd95c742918334a6749056e0a941f

    • SHA256

      621a76e010da44a2ed48b1d5dd59f65c2c0a32ee6076393d4909cdd415f90253

    • SHA512

      353e6f13023cec677d5bf7346960e8f70fe3eb74df5ac4b69eddf1210d54a2ff5b965d0f4dc188af1d0829bb4c4218d8bafdc67bdc2712c65c4c95dd650e8db6

    • SSDEEP

      384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HjI:bVCPwFRo6CpwXFXSqQXfjAU

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks