General

  • Target

    2024-06-10_e7f362b2ed0be0eeefbc27e7303195b1_cryptolocker

  • Size

    73KB

  • Sample

    240610-g6n7msdh29

  • MD5

    e7f362b2ed0be0eeefbc27e7303195b1

  • SHA1

    f926ef0dfd52d811f1b8f99395672019c554069a

  • SHA256

    606615a7db5f31879e9d8fceb99135aefdb2592d94ca0b7be8dbd839e83cf2fd

  • SHA512

    46d343f758f8db5f66ed8cf39b3da1a522a311f1e8950a70228dd13c542540a5bbe28ef928997ddab1a5c56a94f8cdc3ba0be60fe363406815d8b9b9c3406653

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xv:C4Q2c94OtEvwDpj4H8zk

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_e7f362b2ed0be0eeefbc27e7303195b1_cryptolocker

    • Size

      73KB

    • MD5

      e7f362b2ed0be0eeefbc27e7303195b1

    • SHA1

      f926ef0dfd52d811f1b8f99395672019c554069a

    • SHA256

      606615a7db5f31879e9d8fceb99135aefdb2592d94ca0b7be8dbd839e83cf2fd

    • SHA512

      46d343f758f8db5f66ed8cf39b3da1a522a311f1e8950a70228dd13c542540a5bbe28ef928997ddab1a5c56a94f8cdc3ba0be60fe363406815d8b9b9c3406653

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xv:C4Q2c94OtEvwDpj4H8zk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks