General

  • Target

    2024-06-11_2d060220f63307eebdf390edaf32f996_cryptolocker

  • Size

    61KB

  • Sample

    240611-a7r7csyajn

  • MD5

    2d060220f63307eebdf390edaf32f996

  • SHA1

    89a51ba075ddcb8ae3eaf649f99053d8c5ca631f

  • SHA256

    fc888caaeb4c359d4b6c39cec91572d84f36cc568818ec30861cf8c3d68a2997

  • SHA512

    3330b1724a52a16b1a67fb59dbf09ec52285e86ff97861ab0de3d139df0cbc9939847667139156a3cb4c89a4ab64da5e9e3152ae672d76e47f0979b559f1b994

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP6pd3k:H6QFElP6n+gou9cvMOtEvwDpjCpVXz3k

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_2d060220f63307eebdf390edaf32f996_cryptolocker

    • Size

      61KB

    • MD5

      2d060220f63307eebdf390edaf32f996

    • SHA1

      89a51ba075ddcb8ae3eaf649f99053d8c5ca631f

    • SHA256

      fc888caaeb4c359d4b6c39cec91572d84f36cc568818ec30861cf8c3d68a2997

    • SHA512

      3330b1724a52a16b1a67fb59dbf09ec52285e86ff97861ab0de3d139df0cbc9939847667139156a3cb4c89a4ab64da5e9e3152ae672d76e47f0979b559f1b994

    • SSDEEP

      768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP6pd3k:H6QFElP6n+gou9cvMOtEvwDpjCpVXz3k

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks