General

  • Target

    2024-06-13_2d42e03118bfb66c4290bcdd71f25497_cryptolocker

  • Size

    42KB

  • Sample

    240613-qpf95svcqn

  • MD5

    2d42e03118bfb66c4290bcdd71f25497

  • SHA1

    674f6e4a8f5b3846716a7b5f882f3ac92638c2ac

  • SHA256

    4b1666e8f7d7d45adba563c0eac6b59b8bd326492f7b4a82973c08110849d8f1

  • SHA512

    28d9c6c3ef08341afc1870fc520b67d65605b5a9975809779c4c2278f06cb5f4cf393e17527aaf300403a47da69e4be1d80cb456a7e4bae3edda7e76f5990dd0

  • SSDEEP

    768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKo3I:ba6YcA/Xk3wXFXSqAJCI

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-13_2d42e03118bfb66c4290bcdd71f25497_cryptolocker

    • Size

      42KB

    • MD5

      2d42e03118bfb66c4290bcdd71f25497

    • SHA1

      674f6e4a8f5b3846716a7b5f882f3ac92638c2ac

    • SHA256

      4b1666e8f7d7d45adba563c0eac6b59b8bd326492f7b4a82973c08110849d8f1

    • SHA512

      28d9c6c3ef08341afc1870fc520b67d65605b5a9975809779c4c2278f06cb5f4cf393e17527aaf300403a47da69e4be1d80cb456a7e4bae3edda7e76f5990dd0

    • SSDEEP

      768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKo3I:ba6YcA/Xk3wXFXSqAJCI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks