General

  • Target

    2024-06-02_04fa6b132316f8ddc4c87281fc3900e2_cryptolocker

  • Size

    57KB

  • Sample

    240602-f15f1acc8v

  • MD5

    04fa6b132316f8ddc4c87281fc3900e2

  • SHA1

    1f8241a6344a0717086853abf412f99df2eecc82

  • SHA256

    7c5717f3cd9ed00863a9bf672df9058e51edc8ee55d19c10f1b57db53ba00e0d

  • SHA512

    ca9011558513bd1435ba4b08b03128ec807de91498359f9e4aa2c4c15d2249d1fd9ed06e66835fbb62c84a7c7bb2cebd0e021ac03bd045305eaca6fd0892278e

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+x:bP9g/xtCS3Dxx0Jx

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-02_04fa6b132316f8ddc4c87281fc3900e2_cryptolocker

    • Size

      57KB

    • MD5

      04fa6b132316f8ddc4c87281fc3900e2

    • SHA1

      1f8241a6344a0717086853abf412f99df2eecc82

    • SHA256

      7c5717f3cd9ed00863a9bf672df9058e51edc8ee55d19c10f1b57db53ba00e0d

    • SHA512

      ca9011558513bd1435ba4b08b03128ec807de91498359f9e4aa2c4c15d2249d1fd9ed06e66835fbb62c84a7c7bb2cebd0e021ac03bd045305eaca6fd0892278e

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+x:bP9g/xtCS3Dxx0Jx

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks