General

  • Target

    2024-06-13_cec387831bf3f4f0a0125326a5b22ab0_cryptolocker

  • Size

    74KB

  • Sample

    240613-ldy9cswhjn

  • MD5

    cec387831bf3f4f0a0125326a5b22ab0

  • SHA1

    714a3f897942f6f965caf203ea633a27689e5683

  • SHA256

    c06008361c1eb3a6d66586a702326ada75361cdfc0f9b45ae660d1e2b346ebb0

  • SHA512

    4465efd77fbff8bd7773e0200e8a1b40745dc065740c0f3a5a29f0f86f7137f5ce1fc5132dfb2f99f8954c5bf1f8be66f529ccaba139119fe9599b34fbb92667

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95bD:C4Q2c94OtEvwDpj4H8zw

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-13_cec387831bf3f4f0a0125326a5b22ab0_cryptolocker

    • Size

      74KB

    • MD5

      cec387831bf3f4f0a0125326a5b22ab0

    • SHA1

      714a3f897942f6f965caf203ea633a27689e5683

    • SHA256

      c06008361c1eb3a6d66586a702326ada75361cdfc0f9b45ae660d1e2b346ebb0

    • SHA512

      4465efd77fbff8bd7773e0200e8a1b40745dc065740c0f3a5a29f0f86f7137f5ce1fc5132dfb2f99f8954c5bf1f8be66f529ccaba139119fe9599b34fbb92667

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95bD:C4Q2c94OtEvwDpj4H8zw

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks