General

  • Target

    2024-09-05_a3b461521ca3dc46dff2ff6d13da2c56_cryptolocker

  • Size

    72KB

  • Sample

    240905-prt4ca1bpm

  • MD5

    a3b461521ca3dc46dff2ff6d13da2c56

  • SHA1

    8d9dc94cbcb89714f6aba406b2e08d5196e3db85

  • SHA256

    2c7a3f60c039ebdc28ef6247b91fbc78b01f47dec00e3a9c6c04f1c5bd2ad272

  • SHA512

    c7a5cda651e743e33928eb17c1f09523eaa55be7e30a97c3081f44a1d092af0ffbd3b1670a11733eb1ff0c4d18b9fcb2981f8bac77ca4252a75395fde68b190a

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs91:C4Q2c94OtEvwDpj4H8z8

Score
7/10

Malware Config

Targets

    • Target

      2024-09-05_a3b461521ca3dc46dff2ff6d13da2c56_cryptolocker

    • Size

      72KB

    • MD5

      a3b461521ca3dc46dff2ff6d13da2c56

    • SHA1

      8d9dc94cbcb89714f6aba406b2e08d5196e3db85

    • SHA256

      2c7a3f60c039ebdc28ef6247b91fbc78b01f47dec00e3a9c6c04f1c5bd2ad272

    • SHA512

      c7a5cda651e743e33928eb17c1f09523eaa55be7e30a97c3081f44a1d092af0ffbd3b1670a11733eb1ff0c4d18b9fcb2981f8bac77ca4252a75395fde68b190a

    • SSDEEP

      1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs91:C4Q2c94OtEvwDpj4H8z8

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks