General

  • Target

    2024-01-06_a20f4e85eda93d1ddff93c3ba168e60c_cryptolocker

  • Size

    79KB

  • Sample

    240107-pedwlafcg4

  • MD5

    a20f4e85eda93d1ddff93c3ba168e60c

  • SHA1

    1272a174dfd6a3b84cd578d0cfe19b87d9f80b84

  • SHA256

    4875ab2f723c7acaa21ce5b6edec42835565a9f8a09fec9eb9afce9f501d7cef

  • SHA512

    5babb26b0baa9fdd2f36b8d5d71ffde47711ea01136ca25b5ee5282848da1d37acf2665f95540aad9fa4e1d69973453a960ecf1c84ffbf52c7b6c0fe6b238c5f

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS18:zCsanOtEvwDpjy

Score
7/10
upx

Malware Config

Targets

    • Target

      2024-01-06_a20f4e85eda93d1ddff93c3ba168e60c_cryptolocker

    • Size

      79KB

    • MD5

      a20f4e85eda93d1ddff93c3ba168e60c

    • SHA1

      1272a174dfd6a3b84cd578d0cfe19b87d9f80b84

    • SHA256

      4875ab2f723c7acaa21ce5b6edec42835565a9f8a09fec9eb9afce9f501d7cef

    • SHA512

      5babb26b0baa9fdd2f36b8d5d71ffde47711ea01136ca25b5ee5282848da1d37acf2665f95540aad9fa4e1d69973453a960ecf1c84ffbf52c7b6c0fe6b238c5f

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS18:zCsanOtEvwDpjy

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks