General

  • Target

    2024-06-11_71079781a5ee27b818f200d67f771f78_cryptolocker

  • Size

    33KB

  • Sample

    240611-awkcdaxdrp

  • MD5

    71079781a5ee27b818f200d67f771f78

  • SHA1

    ae86812fcf22cacfe4483999e22f9e0de0a25f49

  • SHA256

    b0922b9488b76de76af891b1db693773f4819ccf3a6a15c0270ba02dd647f4d4

  • SHA512

    a0d4b88713f47695a13f28f044b9ec291e73d6b636a2270ec3ec166b884abef118eacb104afc4357f4d7e5c8d59e47b42dae96f08391dfc78d291281be26f8e0

  • SSDEEP

    768:bROjawZEjbhxnbcuyD7U9kXfn62tH/1/LpP+B:bRO2wZEjbnouy8Gv6iH/NLpk

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_71079781a5ee27b818f200d67f771f78_cryptolocker

    • Size

      33KB

    • MD5

      71079781a5ee27b818f200d67f771f78

    • SHA1

      ae86812fcf22cacfe4483999e22f9e0de0a25f49

    • SHA256

      b0922b9488b76de76af891b1db693773f4819ccf3a6a15c0270ba02dd647f4d4

    • SHA512

      a0d4b88713f47695a13f28f044b9ec291e73d6b636a2270ec3ec166b884abef118eacb104afc4357f4d7e5c8d59e47b42dae96f08391dfc78d291281be26f8e0

    • SSDEEP

      768:bROjawZEjbhxnbcuyD7U9kXfn62tH/1/LpP+B:bRO2wZEjbnouy8Gv6iH/NLpk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks