General

  • Target

    2024-05-30_1281745db1db207553884549010d385b_cryptolocker

  • Size

    72KB

  • Sample

    240530-g8bz4ahd3t

  • MD5

    1281745db1db207553884549010d385b

  • SHA1

    878182e7a1e6e7836a9068c712da2cd01557db57

  • SHA256

    92e67cb41dacee7787032ddcad569b3f061f8ad509e63f86d97c7fbfb9c33e8a

  • SHA512

    e56d66bd3a105021658e36c60f5e5edc1102583fa6387d98ce477df2d87ef569f4428c2b928d36b02dc6b9efabac95e07666ee993660ccc9bc7bcab5340e81d3

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xR:C4Q2c94OtEvwDpj4H8ze

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-30_1281745db1db207553884549010d385b_cryptolocker

    • Size

      72KB

    • MD5

      1281745db1db207553884549010d385b

    • SHA1

      878182e7a1e6e7836a9068c712da2cd01557db57

    • SHA256

      92e67cb41dacee7787032ddcad569b3f061f8ad509e63f86d97c7fbfb9c33e8a

    • SHA512

      e56d66bd3a105021658e36c60f5e5edc1102583fa6387d98ce477df2d87ef569f4428c2b928d36b02dc6b9efabac95e07666ee993660ccc9bc7bcab5340e81d3

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xR:C4Q2c94OtEvwDpj4H8ze

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks