General

  • Target

    2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker

  • Size

    39KB

  • Sample

    240620-c2tt4stglh

  • MD5

    73357b0180d1814bba3ada9405118984

  • SHA1

    0ef2552ad71ab53fdaf1ef3d4eff63de5432f085

  • SHA256

    2f0dd83ac947361bc2ff369c7eeb12843fd61ae60bc1c9cd94daaf0929f176f2

  • SHA512

    f71a98129e6ad76fd95f394f56b1140294d50af195b1286556ec0de30b215a9f4d29a37c89f78d88e25e7152415832e5b8272e24a657f9fcb0f035a913bf24f4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYZ:qDdFJy3QMOtEvwDpjjWMl7TM

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker

    • Size

      39KB

    • MD5

      73357b0180d1814bba3ada9405118984

    • SHA1

      0ef2552ad71ab53fdaf1ef3d4eff63de5432f085

    • SHA256

      2f0dd83ac947361bc2ff369c7eeb12843fd61ae60bc1c9cd94daaf0929f176f2

    • SHA512

      f71a98129e6ad76fd95f394f56b1140294d50af195b1286556ec0de30b215a9f4d29a37c89f78d88e25e7152415832e5b8272e24a657f9fcb0f035a913bf24f4

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYZ:qDdFJy3QMOtEvwDpjjWMl7TM

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks