General

  • Target

    2024-06-10_83a4f28d34068a3701c105a8704ae648_cryptolocker

  • Size

    62KB

  • Sample

    240610-femztsch95

  • MD5

    83a4f28d34068a3701c105a8704ae648

  • SHA1

    a8bcb2d353e6120bcd0f9d0b40cd31006035fad5

  • SHA256

    08528a465fee46bb4011f8dc88a2c9810c9983701e7c7514fc6495085ba6f7eb

  • SHA512

    e801a1b823e5f0b19be74151f37039e3274731872467968c9764046d31b33a87cc33948a92ddb019cc50623d02552787d2e4608948ac3df84687d5503e69b4c9

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMhvB:1nK6a+qdOOtEvwDpjJ

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_83a4f28d34068a3701c105a8704ae648_cryptolocker

    • Size

      62KB

    • MD5

      83a4f28d34068a3701c105a8704ae648

    • SHA1

      a8bcb2d353e6120bcd0f9d0b40cd31006035fad5

    • SHA256

      08528a465fee46bb4011f8dc88a2c9810c9983701e7c7514fc6495085ba6f7eb

    • SHA512

      e801a1b823e5f0b19be74151f37039e3274731872467968c9764046d31b33a87cc33948a92ddb019cc50623d02552787d2e4608948ac3df84687d5503e69b4c9

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMhvB:1nK6a+qdOOtEvwDpjJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks