General

  • Target

    4e56cf37c86eda556aa260fd11f073eadc9d13ced210d647700be5c6b7cfb6f6

  • Size

    80KB

  • Sample

    240610-1slzxasfrm

  • MD5

    1b8540e5d69cd58496f21b6235cb5c4a

  • SHA1

    b5990def936d927b6b60fd41abe00e1d18729001

  • SHA256

    4e56cf37c86eda556aa260fd11f073eadc9d13ced210d647700be5c6b7cfb6f6

  • SHA512

    af80f33f4b97660f6dbc900696a8c4e739c3d6f66922a0dcdbe2e6db0beb313a3d4099759183a2978488eeafd68a405dc3cff4a2ea22347d3bc7f7ac1af18df6

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1yO:T6a+rdOOtEvwDpjNtHPg

Score
10/10
upx

Malware Config

Targets

    • Target

      4e56cf37c86eda556aa260fd11f073eadc9d13ced210d647700be5c6b7cfb6f6

    • Size

      80KB

    • MD5

      1b8540e5d69cd58496f21b6235cb5c4a

    • SHA1

      b5990def936d927b6b60fd41abe00e1d18729001

    • SHA256

      4e56cf37c86eda556aa260fd11f073eadc9d13ced210d647700be5c6b7cfb6f6

    • SHA512

      af80f33f4b97660f6dbc900696a8c4e739c3d6f66922a0dcdbe2e6db0beb313a3d4099759183a2978488eeafd68a405dc3cff4a2ea22347d3bc7f7ac1af18df6

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1yO:T6a+rdOOtEvwDpjNtHPg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks