General

  • Target

    2024-05-26_84f927b544f3bf49ab7ad5ca7fb43b43_cryptolocker

  • Size

    53KB

  • Sample

    240526-ebapnadf8z

  • MD5

    84f927b544f3bf49ab7ad5ca7fb43b43

  • SHA1

    d648ae286edb046ce0ba6f0a396ef322e04f1287

  • SHA256

    d0c4264c5c7d42c365d806f315c05aa8a76d151643c18b7e2793a6d915649235

  • SHA512

    1a3d4534b3e13c2cf40d659befcda1643812bdc226c7e5264187c3c40b16242267235b28b029176e11705469620cdfcaa57621818e670ce93d69016f7b2e109f

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOk/DJ:z6QFElP6n+gKmddpMOtEvwDpj31ik/DJ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-26_84f927b544f3bf49ab7ad5ca7fb43b43_cryptolocker

    • Size

      53KB

    • MD5

      84f927b544f3bf49ab7ad5ca7fb43b43

    • SHA1

      d648ae286edb046ce0ba6f0a396ef322e04f1287

    • SHA256

      d0c4264c5c7d42c365d806f315c05aa8a76d151643c18b7e2793a6d915649235

    • SHA512

      1a3d4534b3e13c2cf40d659befcda1643812bdc226c7e5264187c3c40b16242267235b28b029176e11705469620cdfcaa57621818e670ce93d69016f7b2e109f

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOk/DJ:z6QFElP6n+gKmddpMOtEvwDpj31ik/DJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks