General

  • Target

    2024-06-13_32df3f6714de680366a79b515e447c4c_cryptolocker

  • Size

    76KB

  • Sample

    240613-d1xeaaweqn

  • MD5

    32df3f6714de680366a79b515e447c4c

  • SHA1

    d7cf0b0eebe475e2b65ca643bbe90fc3f699449b

  • SHA256

    809929e1020e3cc5cd002bf9738f490f03979d3269310f19610a7ca5d90b2f1b

  • SHA512

    4e9787089ca2ce928911f050b48ffecd41d5d91c2f7904c50dccab77accfa32a7f3561a22b99cc5060702192c6a04a0b4e2df5b69e24041fe3775f8471de18e7

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81G6:1nK6a+qdOOtEvwDpjj

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-13_32df3f6714de680366a79b515e447c4c_cryptolocker

    • Size

      76KB

    • MD5

      32df3f6714de680366a79b515e447c4c

    • SHA1

      d7cf0b0eebe475e2b65ca643bbe90fc3f699449b

    • SHA256

      809929e1020e3cc5cd002bf9738f490f03979d3269310f19610a7ca5d90b2f1b

    • SHA512

      4e9787089ca2ce928911f050b48ffecd41d5d91c2f7904c50dccab77accfa32a7f3561a22b99cc5060702192c6a04a0b4e2df5b69e24041fe3775f8471de18e7

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81G6:1nK6a+qdOOtEvwDpjj

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks