General

  • Target

    2024-01-08_8a15511968f6ff5e8d83417e4e3dd95b_cryptolocker

  • Size

    69KB

  • Sample

    240109-hhfq2aeadn

  • MD5

    8a15511968f6ff5e8d83417e4e3dd95b

  • SHA1

    78310d08120a4296460af2305a350f3cbedba847

  • SHA256

    dc126eb3ba4ef8c0970fa79eaf161d01f9af2a618f46111dc8a6394b9c63ce79

  • SHA512

    dcce489c2736a58f32794bb1d78d0930795ecc346faeef6e2abea833f5f0082870891d7d463592e58de4a47ce861afe84692ef488ab2bd4611f5b6c1e4a0a6cd

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsale28:1nK6a+qdOOtEvwDpjz

Score
7/10
upx

Malware Config

Targets

    • Target

      2024-01-08_8a15511968f6ff5e8d83417e4e3dd95b_cryptolocker

    • Size

      69KB

    • MD5

      8a15511968f6ff5e8d83417e4e3dd95b

    • SHA1

      78310d08120a4296460af2305a350f3cbedba847

    • SHA256

      dc126eb3ba4ef8c0970fa79eaf161d01f9af2a618f46111dc8a6394b9c63ce79

    • SHA512

      dcce489c2736a58f32794bb1d78d0930795ecc346faeef6e2abea833f5f0082870891d7d463592e58de4a47ce861afe84692ef488ab2bd4611f5b6c1e4a0a6cd

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsale28:1nK6a+qdOOtEvwDpjz

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks