General

  • Target

    2024-06-10_bd4d9f46cb9b087e24b4e8c8760426ce_cryptolocker

  • Size

    91KB

  • Sample

    240610-1h6lka1fqe

  • MD5

    bd4d9f46cb9b087e24b4e8c8760426ce

  • SHA1

    c2eaf98e5717e341f3cc6af4b25275524d1d4a20

  • SHA256

    54ac269031d5b61fc5706b847b9796d1de4985612d8b48dbd52def06c5651d54

  • SHA512

    0dde13fe86820c424d78bb385ea3eea815432f610a8f37877c564ca4db243da5e0f01df93a4312a3d8a8d5bd4afd1c92d26045184188c57bde7df3b373e1ecea

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/8r:n6a+1SEOtEvwDpjYYvQd2PX

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_bd4d9f46cb9b087e24b4e8c8760426ce_cryptolocker

    • Size

      91KB

    • MD5

      bd4d9f46cb9b087e24b4e8c8760426ce

    • SHA1

      c2eaf98e5717e341f3cc6af4b25275524d1d4a20

    • SHA256

      54ac269031d5b61fc5706b847b9796d1de4985612d8b48dbd52def06c5651d54

    • SHA512

      0dde13fe86820c424d78bb385ea3eea815432f610a8f37877c564ca4db243da5e0f01df93a4312a3d8a8d5bd4afd1c92d26045184188c57bde7df3b373e1ecea

    • SSDEEP

      1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/8r:n6a+1SEOtEvwDpjYYvQd2PX

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks