General

  • Target

    2024-06-11_41e12fef682552006eb6b091f84cf435_cryptolocker

  • Size

    40KB

  • Sample

    240611-bjfzvsyajf

  • MD5

    41e12fef682552006eb6b091f84cf435

  • SHA1

    06c210cabae5d49e3129f65a8acf4ee2dce051ff

  • SHA256

    f50afaf32b4de0859d9ed5d7fa9c10203032e8ae5f2cbab16606713766b13c83

  • SHA512

    feda7b2baa1bb5ebdefcbb6099a0d6cb8a165510e1f7c54f27a2ca92b5a3d4a2936fb63f42b3e69ec9d3fbeda3ace655872bb327ec8f4cbcaf2901c542ec5566

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYXtt:qDdFJy3QMOtEvwDpjjWMl7TYt

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_41e12fef682552006eb6b091f84cf435_cryptolocker

    • Size

      40KB

    • MD5

      41e12fef682552006eb6b091f84cf435

    • SHA1

      06c210cabae5d49e3129f65a8acf4ee2dce051ff

    • SHA256

      f50afaf32b4de0859d9ed5d7fa9c10203032e8ae5f2cbab16606713766b13c83

    • SHA512

      feda7b2baa1bb5ebdefcbb6099a0d6cb8a165510e1f7c54f27a2ca92b5a3d4a2936fb63f42b3e69ec9d3fbeda3ace655872bb327ec8f4cbcaf2901c542ec5566

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYXtt:qDdFJy3QMOtEvwDpjjWMl7TYt

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks