General

  • Target

    2024-06-09_7eb47fd612a3671090db2d0d182a7ccd_cryptolocker

  • Size

    40KB

  • Sample

    240609-jbd5asfe9s

  • MD5

    7eb47fd612a3671090db2d0d182a7ccd

  • SHA1

    236d08180bc3ed0cf8dde060b41f16cf4c8b32a4

  • SHA256

    b23ed4258bb2c35c556f7a5c0c45f3ea105d1d106179ee074ffcb6189ad29b08

  • SHA512

    9f01dcdb81bb096f51f8267bff085f5771292c7e680b14785a75b34df88d02dc860bc5f1a83f0597d71570256247f8e7877b5a506b6fcc61fac6a9e9231e33a8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB/:qDdFJy3QMOtEvwDpjjWMl7Tdp

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-09_7eb47fd612a3671090db2d0d182a7ccd_cryptolocker

    • Size

      40KB

    • MD5

      7eb47fd612a3671090db2d0d182a7ccd

    • SHA1

      236d08180bc3ed0cf8dde060b41f16cf4c8b32a4

    • SHA256

      b23ed4258bb2c35c556f7a5c0c45f3ea105d1d106179ee074ffcb6189ad29b08

    • SHA512

      9f01dcdb81bb096f51f8267bff085f5771292c7e680b14785a75b34df88d02dc860bc5f1a83f0597d71570256247f8e7877b5a506b6fcc61fac6a9e9231e33a8

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB/:qDdFJy3QMOtEvwDpjjWMl7Tdp

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks