General

  • Target

    2024-06-01_9fe0d73f2d99d9b0f06cd05c3f3134c0_cryptolocker

  • Size

    58KB

  • Sample

    240601-bnrxxsce8v

  • MD5

    9fe0d73f2d99d9b0f06cd05c3f3134c0

  • SHA1

    3f209990340c8479d33ca2d68b88cf58061e4344

  • SHA256

    2bf370b15665ee6925e7d3de2b6d52df8916ac6b7032e75c997bbec160b9a3d0

  • SHA512

    814b6d095e945577f4a722de7c8f25c710fb9e46c15c777c55d766da6f6398bfc2a7bfe1e70fcbf2defd0cdfbc010fbba276c5cf0ec21db4a1ac6d9552c1f182

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax+NV:z6QFElP6n+gKmddpMOtEvwDpj9aYaG

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-01_9fe0d73f2d99d9b0f06cd05c3f3134c0_cryptolocker

    • Size

      58KB

    • MD5

      9fe0d73f2d99d9b0f06cd05c3f3134c0

    • SHA1

      3f209990340c8479d33ca2d68b88cf58061e4344

    • SHA256

      2bf370b15665ee6925e7d3de2b6d52df8916ac6b7032e75c997bbec160b9a3d0

    • SHA512

      814b6d095e945577f4a722de7c8f25c710fb9e46c15c777c55d766da6f6398bfc2a7bfe1e70fcbf2defd0cdfbc010fbba276c5cf0ec21db4a1ac6d9552c1f182

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax+NV:z6QFElP6n+gKmddpMOtEvwDpj9aYaG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks