General

  • Target

    2024-02-23_09fc012b0579a4fe811b36bee72787e1_cryptolocker

  • Size

    110KB

  • Sample

    240223-h9dezsdh34

  • MD5

    09fc012b0579a4fe811b36bee72787e1

  • SHA1

    1a93c8870f9e366d4d9f6d900175f6292ff94381

  • SHA256

    7c8d251c9fa5af26e738cb86477bac698808d5245685633687ef8b6b3e7fc856

  • SHA512

    5a83f802934425abcf32e63ae00f3e0f9a5762926c94b12c20788ad571e07c42ee239260918eb9a3280705a83e21961be1aedae8fd2e09179f370768cc40afed

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwMghD:T6a+rdOOtEvwDpjLzh

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-23_09fc012b0579a4fe811b36bee72787e1_cryptolocker

    • Size

      110KB

    • MD5

      09fc012b0579a4fe811b36bee72787e1

    • SHA1

      1a93c8870f9e366d4d9f6d900175f6292ff94381

    • SHA256

      7c8d251c9fa5af26e738cb86477bac698808d5245685633687ef8b6b3e7fc856

    • SHA512

      5a83f802934425abcf32e63ae00f3e0f9a5762926c94b12c20788ad571e07c42ee239260918eb9a3280705a83e21961be1aedae8fd2e09179f370768cc40afed

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwMghD:T6a+rdOOtEvwDpjLzh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks