Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-28_0aadca04d34541f85014e341130125bf_cryptolocker

  • Size

    89KB

  • Sample

    240428-bslxgadc6v

  • MD5

    0aadca04d34541f85014e341130125bf

  • SHA1

    93f9e49ad044bea40d9fbbe61db4d156107ac38a

  • SHA256

    b89312b3de0080d1118bcef7c63b41c4cbcca22ccc2025f0873a81416d3e9a86

  • SHA512

    cb91ba258b11a1c33da464ed39f5e5d3bbe565131d45669cdd862a7ef27fa1f9731cae9df037c94c27de2883f9fb451ee28eebdaa8515165496fdce7c9831330

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAc:n6a+1SEOtEvwDpjYYvQd2P7

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-28_0aadca04d34541f85014e341130125bf_cryptolocker

    • Size

      89KB

    • MD5

      0aadca04d34541f85014e341130125bf

    • SHA1

      93f9e49ad044bea40d9fbbe61db4d156107ac38a

    • SHA256

      b89312b3de0080d1118bcef7c63b41c4cbcca22ccc2025f0873a81416d3e9a86

    • SHA512

      cb91ba258b11a1c33da464ed39f5e5d3bbe565131d45669cdd862a7ef27fa1f9731cae9df037c94c27de2883f9fb451ee28eebdaa8515165496fdce7c9831330

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAc:n6a+1SEOtEvwDpjYYvQd2P7

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks