General

  • Target

    2024-06-10_42354bff4eebb4f3d093acdd35cd987e_cryptolocker

  • Size

    39KB

  • Sample

    240610-1caa6s1hjj

  • MD5

    42354bff4eebb4f3d093acdd35cd987e

  • SHA1

    45cf3a6d6bad80edcb9ec4bf4dfe1592fd2db2ce

  • SHA256

    531f42668abea8ee10eb7b7378bc821859275464973e08270425ffe4bbc17c62

  • SHA512

    b5ca257c14d4879e12c3a9b60297ea4ef4750f5c07b5302b0b12ff89107060399bd8dcfd07b77c6caab4b1332fd78279e1c1fc85f00e9ab38dd23cd89a9daddb

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBsYx:qDdFJy3QMOtEvwDpjjWMl7Tdvx

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_42354bff4eebb4f3d093acdd35cd987e_cryptolocker

    • Size

      39KB

    • MD5

      42354bff4eebb4f3d093acdd35cd987e

    • SHA1

      45cf3a6d6bad80edcb9ec4bf4dfe1592fd2db2ce

    • SHA256

      531f42668abea8ee10eb7b7378bc821859275464973e08270425ffe4bbc17c62

    • SHA512

      b5ca257c14d4879e12c3a9b60297ea4ef4750f5c07b5302b0b12ff89107060399bd8dcfd07b77c6caab4b1332fd78279e1c1fc85f00e9ab38dd23cd89a9daddb

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBsYx:qDdFJy3QMOtEvwDpjjWMl7Tdvx

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks