General

  • Target

    2024-06-03_ba2e782b8801fda49829b5f193889754_cryptolocker

  • Size

    96KB

  • Sample

    240603-mpa7cabe9x

  • MD5

    ba2e782b8801fda49829b5f193889754

  • SHA1

    988efb13a324049aa2e640fd8c5a518553faac49

  • SHA256

    7404efe2e88ae8fe3741ff4895644767abb89afa2ca0bd14f96644a54a2a620e

  • SHA512

    a4230bea58c5b40871d3137ec78bde1da7c4fbc600a103aabd56b139d52c25c5a1ad2099d385e001bfde804481e6f003729a3b33ed2bc7e3f68df2ed34dbdd93

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+z:AnBdOOtEvwDpj6zo

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-03_ba2e782b8801fda49829b5f193889754_cryptolocker

    • Size

      96KB

    • MD5

      ba2e782b8801fda49829b5f193889754

    • SHA1

      988efb13a324049aa2e640fd8c5a518553faac49

    • SHA256

      7404efe2e88ae8fe3741ff4895644767abb89afa2ca0bd14f96644a54a2a620e

    • SHA512

      a4230bea58c5b40871d3137ec78bde1da7c4fbc600a103aabd56b139d52c25c5a1ad2099d385e001bfde804481e6f003729a3b33ed2bc7e3f68df2ed34dbdd93

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+z:AnBdOOtEvwDpj6zo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks