General

  • Target

    2024-05-22_716cb4d0245e630ced8e77133662b2a7_cryptolocker

  • Size

    53KB

  • Sample

    240522-1mezeaab42

  • MD5

    716cb4d0245e630ced8e77133662b2a7

  • SHA1

    c7d37e5ddf2f24ccc453307d7d44de34a3d2feca

  • SHA256

    13c7fa01e52ad96a95b173a8bbd6493e798d424c8f1d5d896d99efaa7f2120ee

  • SHA512

    2c5f03708c808ac539c9a84bb92a9599a59a69a06c774e71bcd0d766bb2b814055cfbe91f471fe85a8ceb7869de4c21d5721fca27a1da2e07c1a9550b1e50941

  • SSDEEP

    768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtO2:bODOw9acifAoc+v5

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-22_716cb4d0245e630ced8e77133662b2a7_cryptolocker

    • Size

      53KB

    • MD5

      716cb4d0245e630ced8e77133662b2a7

    • SHA1

      c7d37e5ddf2f24ccc453307d7d44de34a3d2feca

    • SHA256

      13c7fa01e52ad96a95b173a8bbd6493e798d424c8f1d5d896d99efaa7f2120ee

    • SHA512

      2c5f03708c808ac539c9a84bb92a9599a59a69a06c774e71bcd0d766bb2b814055cfbe91f471fe85a8ceb7869de4c21d5721fca27a1da2e07c1a9550b1e50941

    • SSDEEP

      768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtO2:bODOw9acifAoc+v5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks