General

  • Target

    2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker

  • Size

    40KB

  • Sample

    240610-fc3x9sch65

  • MD5

    5d3ff74f8d1d4da5e97d2d86c5bb9e3f

  • SHA1

    dea2d199719ab4b77a6551d297b6815423ba24d1

  • SHA256

    c90f702988a406ed7834f87f73d23e5bfe4c365c564c20c0fbaadbcb906c8dd1

  • SHA512

    43f5554dd02559306703c22e8c4dbdad2a10f8bbb3f868ff9b82e0013966aac23b7d84212629b293441bdf511657c6a95aca58104b7a8284519335dd537b8802

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUqz:qDdFJy3QMOtEvwDpjjWMl7TdaUqz

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker

    • Size

      40KB

    • MD5

      5d3ff74f8d1d4da5e97d2d86c5bb9e3f

    • SHA1

      dea2d199719ab4b77a6551d297b6815423ba24d1

    • SHA256

      c90f702988a406ed7834f87f73d23e5bfe4c365c564c20c0fbaadbcb906c8dd1

    • SHA512

      43f5554dd02559306703c22e8c4dbdad2a10f8bbb3f868ff9b82e0013966aac23b7d84212629b293441bdf511657c6a95aca58104b7a8284519335dd537b8802

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUqz:qDdFJy3QMOtEvwDpjjWMl7TdaUqz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks