General

  • Target

    2024-05-26_2774d4c98185e68e16312e8f5bab3222_cryptolocker

  • Size

    40KB

  • Sample

    240526-eblf6aee25

  • MD5

    2774d4c98185e68e16312e8f5bab3222

  • SHA1

    98c695cd632fea392cd061bc8a3e25f18f3daae4

  • SHA256

    a316f7c2a4924df03ebc4b9468508b57a7d9bfe20ef159b8697b780c1b8630e1

  • SHA512

    ac6ea7d16a0106689ed5e358c5ebbe186035e517a21c2e85161ac31adead1b98d28c2ac4c316f27003dcff7254f33f159dca02871743fde4d291c66f3d873de3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc/:qDdFJy3QMOtEvwDpjjWMl7TdY

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-26_2774d4c98185e68e16312e8f5bab3222_cryptolocker

    • Size

      40KB

    • MD5

      2774d4c98185e68e16312e8f5bab3222

    • SHA1

      98c695cd632fea392cd061bc8a3e25f18f3daae4

    • SHA256

      a316f7c2a4924df03ebc4b9468508b57a7d9bfe20ef159b8697b780c1b8630e1

    • SHA512

      ac6ea7d16a0106689ed5e358c5ebbe186035e517a21c2e85161ac31adead1b98d28c2ac4c316f27003dcff7254f33f159dca02871743fde4d291c66f3d873de3

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc/:qDdFJy3QMOtEvwDpjjWMl7TdY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks