General

  • Target

    2024-06-11_b408293ae4f662d45be20e4c9b16a66c_cryptolocker

  • Size

    37KB

  • Sample

    240611-bmmltayfqj

  • MD5

    b408293ae4f662d45be20e4c9b16a66c

  • SHA1

    9241d8c10cddb2f196c05475b230730ecc6ddb50

  • SHA256

    325d5d71d46e770dc4a7f29385707e8639899ec2c141165f2bc2a92f948e0b6e

  • SHA512

    3cfc73efae48022fc71250d4c302c45e62bc2e807a7f15f79f94b6125d0ada62e4805a135c0daa78a59ad513041ffbfa1e516c54a64dae12df1bcf7cf6ad394d

  • SSDEEP

    768:qU6yu4M3Eu2smnbcuyD7U9dtOOtEvwDpjeMLa5zZyR/Ad10:qUZbMb2pnouy8TMOtEvwDpjja7yRr

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_b408293ae4f662d45be20e4c9b16a66c_cryptolocker

    • Size

      37KB

    • MD5

      b408293ae4f662d45be20e4c9b16a66c

    • SHA1

      9241d8c10cddb2f196c05475b230730ecc6ddb50

    • SHA256

      325d5d71d46e770dc4a7f29385707e8639899ec2c141165f2bc2a92f948e0b6e

    • SHA512

      3cfc73efae48022fc71250d4c302c45e62bc2e807a7f15f79f94b6125d0ada62e4805a135c0daa78a59ad513041ffbfa1e516c54a64dae12df1bcf7cf6ad394d

    • SSDEEP

      768:qU6yu4M3Eu2smnbcuyD7U9dtOOtEvwDpjeMLa5zZyR/Ad10:qUZbMb2pnouy8TMOtEvwDpjja7yRr

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks