General

  • Target

    2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker

  • Size

    56KB

  • Sample

    240527-c3qtvadc6y

  • MD5

    72faecfc21b7f09a2605f851d294317b

  • SHA1

    3ec3d5d8c44d632f4cd5ab710cdd65615a729a9f

  • SHA256

    addb328d597626b192e0ea0dfe07918033fc881a325e3f1fa9ea87de43b585b8

  • SHA512

    c27fda97b86b9874f6700a1194ba45403805841f633c6cb2048760e556d080367e179c3f8b6b3e5031e3cfb1eb3cd2e0ce96bc3d8a79abec512098ece2ce61d6

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYG:bP9g/xtCS3Dxx0LG

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker

    • Size

      56KB

    • MD5

      72faecfc21b7f09a2605f851d294317b

    • SHA1

      3ec3d5d8c44d632f4cd5ab710cdd65615a729a9f

    • SHA256

      addb328d597626b192e0ea0dfe07918033fc881a325e3f1fa9ea87de43b585b8

    • SHA512

      c27fda97b86b9874f6700a1194ba45403805841f633c6cb2048760e556d080367e179c3f8b6b3e5031e3cfb1eb3cd2e0ce96bc3d8a79abec512098ece2ce61d6

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYG:bP9g/xtCS3Dxx0LG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks