General

  • Target

    2024-04-27_8a0a0ce92797e3559d112769d1b3375e_cryptolocker

  • Size

    87KB

  • Sample

    240427-2h4yeaab27

  • MD5

    8a0a0ce92797e3559d112769d1b3375e

  • SHA1

    cf02b22ef91a699d225de274941bc0d0000ae8a0

  • SHA256

    4c72fefce81c758c0293daf045fae31837a9a932b5a2a343c655bc3c755db5ea

  • SHA512

    12cb656044be4a5ca7e84ba7391a29952fb1de91eb618cef6c0e7a87c6ff891c2661037955be2a7460e7ab5cf3aad23555c6dcdec9619319daef3465e8ff82dc

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg5D:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-27_8a0a0ce92797e3559d112769d1b3375e_cryptolocker

    • Size

      87KB

    • MD5

      8a0a0ce92797e3559d112769d1b3375e

    • SHA1

      cf02b22ef91a699d225de274941bc0d0000ae8a0

    • SHA256

      4c72fefce81c758c0293daf045fae31837a9a932b5a2a343c655bc3c755db5ea

    • SHA512

      12cb656044be4a5ca7e84ba7391a29952fb1de91eb618cef6c0e7a87c6ff891c2661037955be2a7460e7ab5cf3aad23555c6dcdec9619319daef3465e8ff82dc

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg5D:AnBdOOtEvwDpj6zp

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks