General

  • Target

    2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker

  • Size

    60KB

  • Sample

    240521-x5w4vsga5w

  • MD5

    323f1881200878d2eaf7ba3baa0b308d

  • SHA1

    41384c92dd7869a94c39ee7f799753704b0e9942

  • SHA256

    0e308ca2ec460e0e5844171ea3c4e160ac429cc8b3de84187fe5e53e13e45fb6

  • SHA512

    cd60f24a9ce6b5dc60d050da42b32118d3aeaf493cb83369047bba18f0caf66ef6c5caa4212919b102d1c1c1a6497094c31c536027b77bfa1fc36ab9db8e03e7

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3X:z6a+CdOOtEvwDpjQM

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker

    • Size

      60KB

    • MD5

      323f1881200878d2eaf7ba3baa0b308d

    • SHA1

      41384c92dd7869a94c39ee7f799753704b0e9942

    • SHA256

      0e308ca2ec460e0e5844171ea3c4e160ac429cc8b3de84187fe5e53e13e45fb6

    • SHA512

      cd60f24a9ce6b5dc60d050da42b32118d3aeaf493cb83369047bba18f0caf66ef6c5caa4212919b102d1c1c1a6497094c31c536027b77bfa1fc36ab9db8e03e7

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3X:z6a+CdOOtEvwDpjQM

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks