General

  • Target

    2024-05-25_39d4e2a3541df454aae2edb64fd6b745_cryptolocker

  • Size

    81KB

  • Sample

    240525-avjz8agf35

  • MD5

    39d4e2a3541df454aae2edb64fd6b745

  • SHA1

    86504ef241075f8d46cbd33bade60e031ff21b8d

  • SHA256

    59587d53290e1958a928044532e3eaebee131539fadde47db574d7eda8d13d48

  • SHA512

    1c66eb41469616a760eeb50e4cc8fb45fdb17834083af76bb1660082d80069e97f86ee8e02f5f4c4ca47cda5944ad7f35f1507eb6ef365951e6d0c870a21d733

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdf:T6a+rdOOtEvwDpjNt5

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-25_39d4e2a3541df454aae2edb64fd6b745_cryptolocker

    • Size

      81KB

    • MD5

      39d4e2a3541df454aae2edb64fd6b745

    • SHA1

      86504ef241075f8d46cbd33bade60e031ff21b8d

    • SHA256

      59587d53290e1958a928044532e3eaebee131539fadde47db574d7eda8d13d48

    • SHA512

      1c66eb41469616a760eeb50e4cc8fb45fdb17834083af76bb1660082d80069e97f86ee8e02f5f4c4ca47cda5944ad7f35f1507eb6ef365951e6d0c870a21d733

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdf:T6a+rdOOtEvwDpjNt5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks