General

  • Target

    2024-06-11_5fada690f27f10ab18990d66192a4fc9_cryptolocker

  • Size

    53KB

  • Sample

    240611-bxkvzayfjd

  • MD5

    5fada690f27f10ab18990d66192a4fc9

  • SHA1

    d8f860e6ac9c8d4e7b35e21b589f043d65364b97

  • SHA256

    f7955585687e15e74850013589ee44e60b52045154f97300dd436345973994e4

  • SHA512

    873f6eb56f374d656fc4520ac4ed2ae77dba74252915621b53ffd8759cceef38a6a3128f5ff8324e3f50691219ad4fcc94ced730f425274d889d9abdd4b9b7ab

  • SSDEEP

    768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOXo:bODOw9acifAoc+vL

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-11_5fada690f27f10ab18990d66192a4fc9_cryptolocker

    • Size

      53KB

    • MD5

      5fada690f27f10ab18990d66192a4fc9

    • SHA1

      d8f860e6ac9c8d4e7b35e21b589f043d65364b97

    • SHA256

      f7955585687e15e74850013589ee44e60b52045154f97300dd436345973994e4

    • SHA512

      873f6eb56f374d656fc4520ac4ed2ae77dba74252915621b53ffd8759cceef38a6a3128f5ff8324e3f50691219ad4fcc94ced730f425274d889d9abdd4b9b7ab

    • SSDEEP

      768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOXo:bODOw9acifAoc+vL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks