General

  • Target

    2024-06-11_d3815476f3e4d9f84ee8ee15b81e3042_cryptolocker

  • Size

    53KB

  • Sample

    240611-a319gaxgml

  • MD5

    d3815476f3e4d9f84ee8ee15b81e3042

  • SHA1

    1a2ec146065216141b5a9cf7d62d6dd5ac339c6c

  • SHA256

    bf893b04d9f810e384619f690fb202d1e60cb0eee7313f86a49e24fca2a9bf9d

  • SHA512

    7450f974b98f6c76ec03af66925338fcf899538d036cd71186d9172649fc8c5abacd5a7a60768985719fabc7c2f9ad378f1ed86e0dcca9c1cf502b89dab770c1

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOmL:z6QFElP6n+gKmddpMOtEvwDpj31imL

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_d3815476f3e4d9f84ee8ee15b81e3042_cryptolocker

    • Size

      53KB

    • MD5

      d3815476f3e4d9f84ee8ee15b81e3042

    • SHA1

      1a2ec146065216141b5a9cf7d62d6dd5ac339c6c

    • SHA256

      bf893b04d9f810e384619f690fb202d1e60cb0eee7313f86a49e24fca2a9bf9d

    • SHA512

      7450f974b98f6c76ec03af66925338fcf899538d036cd71186d9172649fc8c5abacd5a7a60768985719fabc7c2f9ad378f1ed86e0dcca9c1cf502b89dab770c1

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOmL:z6QFElP6n+gKmddpMOtEvwDpj31imL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks