General

  • Target

    2024-09-09_4790dcae5f1665feeb1059e75ad6ef3f_cryptolocker

  • Size

    67KB

  • Sample

    240909-c5jtbazgqc

  • MD5

    4790dcae5f1665feeb1059e75ad6ef3f

  • SHA1

    38ad82fe0ed7355513239e358236bd1a102b5120

  • SHA256

    7280a5b828d0b7ca3d2c36e122a1af6d98a0a509975feefb3f2452b25a5f02d4

  • SHA512

    aa981bbee9f73264113910b0a12daa5a79f41f486f43d5148b090415fc8c5f45c3f84003f57774160979751ecd9c07ef8267649faea1defc90e4e7a2a24bbe1b

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDyfK:1nK6a+qdOOtEvwDpjd

Score
7/10

Malware Config

Targets

    • Target

      2024-09-09_4790dcae5f1665feeb1059e75ad6ef3f_cryptolocker

    • Size

      67KB

    • MD5

      4790dcae5f1665feeb1059e75ad6ef3f

    • SHA1

      38ad82fe0ed7355513239e358236bd1a102b5120

    • SHA256

      7280a5b828d0b7ca3d2c36e122a1af6d98a0a509975feefb3f2452b25a5f02d4

    • SHA512

      aa981bbee9f73264113910b0a12daa5a79f41f486f43d5148b090415fc8c5f45c3f84003f57774160979751ecd9c07ef8267649faea1defc90e4e7a2a24bbe1b

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDyfK:1nK6a+qdOOtEvwDpjd

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks