General

  • Target

    2024-06-08_024637f23dd75893c710ee85721f22f2_cryptolocker

  • Size

    92KB

  • Sample

    240608-y6scqsgd88

  • MD5

    024637f23dd75893c710ee85721f22f2

  • SHA1

    add75b1b8ed696721a1fba88013b488d3b721ce7

  • SHA256

    dc486ad96e64cad1dd7b207cded364c7a3380b3bf5ac99b3c898d253cf050108

  • SHA512

    071d5634a06d271be0214eefbf3eb25cfe41b1e4f686b9cc6814aa373a98a50a77f79f442a15ab5166366544c04fb0627532c4c03b978b40df3530cf5b878ec6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddAY:AnBdOOtEvwDpj6zj

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-08_024637f23dd75893c710ee85721f22f2_cryptolocker

    • Size

      92KB

    • MD5

      024637f23dd75893c710ee85721f22f2

    • SHA1

      add75b1b8ed696721a1fba88013b488d3b721ce7

    • SHA256

      dc486ad96e64cad1dd7b207cded364c7a3380b3bf5ac99b3c898d253cf050108

    • SHA512

      071d5634a06d271be0214eefbf3eb25cfe41b1e4f686b9cc6814aa373a98a50a77f79f442a15ab5166366544c04fb0627532c4c03b978b40df3530cf5b878ec6

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddAY:AnBdOOtEvwDpj6zj

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks