General

  • Target

    2024-06-10_e0f17ee4360c34ee7c7bafd8080d956e_cryptolocker

  • Size

    40KB

  • Sample

    240610-1j4hlascnl

  • MD5

    e0f17ee4360c34ee7c7bafd8080d956e

  • SHA1

    d2249578c4bacb7676bfe45160714e2e1d44ed28

  • SHA256

    f784f269cfc66250dce1ce50fc804144861151b2fbf9c260351b4841f42ae6de

  • SHA512

    9f1dcbae9068b94685fb41a33be79c423bbfc657e07f5f0a9f8798ba7ecf523354f878f722b56d831b7cf7b6a00fea5a25e15fda83a067aeb890f816154810c9

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbX:qDdFJy3QMOtEvwDpjjWMl7Tdr

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_e0f17ee4360c34ee7c7bafd8080d956e_cryptolocker

    • Size

      40KB

    • MD5

      e0f17ee4360c34ee7c7bafd8080d956e

    • SHA1

      d2249578c4bacb7676bfe45160714e2e1d44ed28

    • SHA256

      f784f269cfc66250dce1ce50fc804144861151b2fbf9c260351b4841f42ae6de

    • SHA512

      9f1dcbae9068b94685fb41a33be79c423bbfc657e07f5f0a9f8798ba7ecf523354f878f722b56d831b7cf7b6a00fea5a25e15fda83a067aeb890f816154810c9

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbX:qDdFJy3QMOtEvwDpjjWMl7Tdr

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks