General

  • Target

    2024-06-02_2bc94b187663fd059309b9f542eef635_cryptolocker

  • Size

    41KB

  • Sample

    240602-f2mbtach49

  • MD5

    2bc94b187663fd059309b9f542eef635

  • SHA1

    35defbd9810761dc01c46c7b7b72d18c8183ffcc

  • SHA256

    0ea72991a1329413823edad484bf309a17c4915595bbca0efd18fe089b610a84

  • SHA512

    25e7f8aca1cf00fd3a55c78d974a81aa9125aba933498953ab613f4eddefa51bf05d7acb8d831da457d9773801b55184b6ab94c7c500981d231709e79b82b8b4

  • SSDEEP

    768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKV5u:ba6YcA/Xk3wXFXSqAJV8

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-02_2bc94b187663fd059309b9f542eef635_cryptolocker

    • Size

      41KB

    • MD5

      2bc94b187663fd059309b9f542eef635

    • SHA1

      35defbd9810761dc01c46c7b7b72d18c8183ffcc

    • SHA256

      0ea72991a1329413823edad484bf309a17c4915595bbca0efd18fe089b610a84

    • SHA512

      25e7f8aca1cf00fd3a55c78d974a81aa9125aba933498953ab613f4eddefa51bf05d7acb8d831da457d9773801b55184b6ab94c7c500981d231709e79b82b8b4

    • SSDEEP

      768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKV5u:ba6YcA/Xk3wXFXSqAJV8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks