General

  • Target

    2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker

  • Size

    91KB

  • Sample

    240603-kek8fsad85

  • MD5

    9328bca4eb68f7547a65bc54c66f73b2

  • SHA1

    29e3d42d937f6257ba3fc6a54003af8a2070bf61

  • SHA256

    bab64d278499761f56db5172e769b3532c8f1a2ccd486b73fda30c1a144bab81

  • SHA512

    87575a0d4778f4cce8f364817a07b35e93c7e984f052a1677191bd42a4b560f406502020d7c87c5988da14320d2bf8671bc7a51d28bc09e5b5e7eab81e9913a8

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyE:n6a+1SEOtEvwDpjYYvQd2PF

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker

    • Size

      91KB

    • MD5

      9328bca4eb68f7547a65bc54c66f73b2

    • SHA1

      29e3d42d937f6257ba3fc6a54003af8a2070bf61

    • SHA256

      bab64d278499761f56db5172e769b3532c8f1a2ccd486b73fda30c1a144bab81

    • SHA512

      87575a0d4778f4cce8f364817a07b35e93c7e984f052a1677191bd42a4b560f406502020d7c87c5988da14320d2bf8671bc7a51d28bc09e5b5e7eab81e9913a8

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyE:n6a+1SEOtEvwDpjYYvQd2PF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks