General

  • Target

    2024-05-27_3891c9ef2effd2fa3e61352b1f99826e_cryptolocker

  • Size

    54KB

  • Sample

    240527-w3gqqaec63

  • MD5

    3891c9ef2effd2fa3e61352b1f99826e

  • SHA1

    b7e17e7229e3cb0f18be3652a823c0bb4d213f19

  • SHA256

    e70f4f8a00a7da1f5e802be34bd8f2e1cd7c3b266554a48920e9d58b54831ba3

  • SHA512

    7a13e5bc6e24d44415177f663328e46e78a90e0e3eee28202157f8c518f351383abeb99c1cd5559c0cef58f820c1849f5448667a6451ce750988ba9ec2e5982f

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj31ikgd1+:z6a+CdOOtEvwDpjn

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-27_3891c9ef2effd2fa3e61352b1f99826e_cryptolocker

    • Size

      54KB

    • MD5

      3891c9ef2effd2fa3e61352b1f99826e

    • SHA1

      b7e17e7229e3cb0f18be3652a823c0bb4d213f19

    • SHA256

      e70f4f8a00a7da1f5e802be34bd8f2e1cd7c3b266554a48920e9d58b54831ba3

    • SHA512

      7a13e5bc6e24d44415177f663328e46e78a90e0e3eee28202157f8c518f351383abeb99c1cd5559c0cef58f820c1849f5448667a6451ce750988ba9ec2e5982f

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj31ikgd1+:z6a+CdOOtEvwDpjn

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks