General

  • Target

    2024-06-13_d249eefcfc12cd75d04704a5b7549d15_cryptolocker

  • Size

    25KB

  • Sample

    240613-eed69axarj

  • MD5

    d249eefcfc12cd75d04704a5b7549d15

  • SHA1

    7c0833e79488d2c80efe3487b6c9eb8fb6e8245c

  • SHA256

    0691ae9be7b5052c7e8b48662f99712b5ec5b9603e072ad03de98b0a87251b8a

  • SHA512

    48165463e5a97c6a0505eadeae25427b61628422ea1f8fc007fe6c3c7d08a4d7adf90e8fa2e354570e631062c6af9868137835acc21cff79e6d77a0ae7d55434

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMJ1M:bVCPwFRo6CpwXFXSqQXfjAsJ6

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-13_d249eefcfc12cd75d04704a5b7549d15_cryptolocker

    • Size

      25KB

    • MD5

      d249eefcfc12cd75d04704a5b7549d15

    • SHA1

      7c0833e79488d2c80efe3487b6c9eb8fb6e8245c

    • SHA256

      0691ae9be7b5052c7e8b48662f99712b5ec5b9603e072ad03de98b0a87251b8a

    • SHA512

      48165463e5a97c6a0505eadeae25427b61628422ea1f8fc007fe6c3c7d08a4d7adf90e8fa2e354570e631062c6af9868137835acc21cff79e6d77a0ae7d55434

    • SSDEEP

      384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMJ1M:bVCPwFRo6CpwXFXSqQXfjAsJ6

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks