General

  • Target

    2024-06-07_3abe015ee4a8c63f5959281fa759331a_cryptolocker

  • Size

    71KB

  • Sample

    240607-sdvphaab3v

  • MD5

    3abe015ee4a8c63f5959281fa759331a

  • SHA1

    3e13f69053786f8fd077b35b921da67a9b6b6855

  • SHA256

    c3b34a5675f073fc649b731ed62f67f7298ebb17cc3f491909127c848558ebfd

  • SHA512

    2f62e3248c706d3336c32e215384a081a56ef4dd339e801691bce5ce036e0c3e116e8e0578591e0274bc6c78fecb68a8435be61aef49fdb8ebeaf8bf12859b9d

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9iw:C4Q2c94OtEvwDpj4H8zA

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-07_3abe015ee4a8c63f5959281fa759331a_cryptolocker

    • Size

      71KB

    • MD5

      3abe015ee4a8c63f5959281fa759331a

    • SHA1

      3e13f69053786f8fd077b35b921da67a9b6b6855

    • SHA256

      c3b34a5675f073fc649b731ed62f67f7298ebb17cc3f491909127c848558ebfd

    • SHA512

      2f62e3248c706d3336c32e215384a081a56ef4dd339e801691bce5ce036e0c3e116e8e0578591e0274bc6c78fecb68a8435be61aef49fdb8ebeaf8bf12859b9d

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9iw:C4Q2c94OtEvwDpj4H8zA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks