General

  • Target

    2024-06-10_ab56db92377fd62ae5b7e3606db74a82_cryptolocker

  • Size

    62KB

  • Sample

    240610-gx2rdada4z

  • MD5

    ab56db92377fd62ae5b7e3606db74a82

  • SHA1

    e80f84a524d28c73a4eee466005cf8cbefee7b25

  • SHA256

    f07a2812ab8ae167f0c4c79a295023a8d8391adf752277de3cd6509a265fc698

  • SHA512

    5ee83e7658a9a8729f8cf0f579d4e6b62c1269a5e5f9686c05f01960fc04a86caf0f105670abc6e3d097e66ff6b4b4f9e83576df38c657824c985cb02ee5ac0f

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMhv/:1nK6a+qdOOtEvwDpjX

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-10_ab56db92377fd62ae5b7e3606db74a82_cryptolocker

    • Size

      62KB

    • MD5

      ab56db92377fd62ae5b7e3606db74a82

    • SHA1

      e80f84a524d28c73a4eee466005cf8cbefee7b25

    • SHA256

      f07a2812ab8ae167f0c4c79a295023a8d8391adf752277de3cd6509a265fc698

    • SHA512

      5ee83e7658a9a8729f8cf0f579d4e6b62c1269a5e5f9686c05f01960fc04a86caf0f105670abc6e3d097e66ff6b4b4f9e83576df38c657824c985cb02ee5ac0f

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMhv/:1nK6a+qdOOtEvwDpjX

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks