General

  • Target

    2024-06-12_837e60bbd3fb9220374d9312acc9ecb8_cryptolocker

  • Size

    41KB

  • Sample

    240612-xat11svhka

  • MD5

    837e60bbd3fb9220374d9312acc9ecb8

  • SHA1

    fa5e5446c1f95e0237395ea29e6ebb2ba4a821da

  • SHA256

    27631c4c360a373020319cde28e83d6061396bf511a1c95a28350b12e9a6c91c

  • SHA512

    abb60a63eb12c97e575db14ed33b628fa58672f64df212f628779fe9e4c4cfe32e33fad484c9480291004a6684ebb1753eb27236cb6dafcfbe8ecb4271f86799

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc4Su:qDdFJy3QMOtEvwDpjjWMl7Tdsu

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-12_837e60bbd3fb9220374d9312acc9ecb8_cryptolocker

    • Size

      41KB

    • MD5

      837e60bbd3fb9220374d9312acc9ecb8

    • SHA1

      fa5e5446c1f95e0237395ea29e6ebb2ba4a821da

    • SHA256

      27631c4c360a373020319cde28e83d6061396bf511a1c95a28350b12e9a6c91c

    • SHA512

      abb60a63eb12c97e575db14ed33b628fa58672f64df212f628779fe9e4c4cfe32e33fad484c9480291004a6684ebb1753eb27236cb6dafcfbe8ecb4271f86799

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc4Su:qDdFJy3QMOtEvwDpjjWMl7Tdsu

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks