General

  • Target

    2024-05-21_cabe62ab2393fda48934d7cec2140237_cryptolocker

  • Size

    95KB

  • Sample

    240521-s7ekdaag65

  • MD5

    cabe62ab2393fda48934d7cec2140237

  • SHA1

    4cbf116ff2dba1822bf88a63a0732d6c4763f7af

  • SHA256

    32edea67968b4fd0724af3b0f7d5e9868f95f599c2f475a2286e061d0d5b356d

  • SHA512

    eb683813011774fab848fe4d1e11da25241833531dbd3ba2f1957987d2587cd68f02a717adf1c6984710c06a28cae3a8d3613e35eb467f8ec6625ee7e81aabe2

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+f:AnBdOOtEvwDpj6z8

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-21_cabe62ab2393fda48934d7cec2140237_cryptolocker

    • Size

      95KB

    • MD5

      cabe62ab2393fda48934d7cec2140237

    • SHA1

      4cbf116ff2dba1822bf88a63a0732d6c4763f7af

    • SHA256

      32edea67968b4fd0724af3b0f7d5e9868f95f599c2f475a2286e061d0d5b356d

    • SHA512

      eb683813011774fab848fe4d1e11da25241833531dbd3ba2f1957987d2587cd68f02a717adf1c6984710c06a28cae3a8d3613e35eb467f8ec6625ee7e81aabe2

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+f:AnBdOOtEvwDpj6z8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks