General

  • Target

    2024-09-13_22202da3871e91f779ad5a2f02832219_cryptolocker

  • Size

    70KB

  • Sample

    240913-nllpcazalr

  • MD5

    22202da3871e91f779ad5a2f02832219

  • SHA1

    73e85b945c4ce75c81aa725fd185dc0369991eda

  • SHA256

    1773cc4e133fcb5fd958bde82d3f2c60ca7e8dbfd18272e5a8eeeeaf9bcd66fd

  • SHA512

    8bde9ba4572fdd2bbc8266083a292f4212acf9b4b556bac4ee3d3dddbda9c4064276f010b98d59a34cbc2ef9ac49a258aecd3cfd7c10e80ead7fc3cc415fcff8

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe09:78SEOtEvwDpjWYvQd2Pp

Score
7/10

Malware Config

Targets

    • Target

      2024-09-13_22202da3871e91f779ad5a2f02832219_cryptolocker

    • Size

      70KB

    • MD5

      22202da3871e91f779ad5a2f02832219

    • SHA1

      73e85b945c4ce75c81aa725fd185dc0369991eda

    • SHA256

      1773cc4e133fcb5fd958bde82d3f2c60ca7e8dbfd18272e5a8eeeeaf9bcd66fd

    • SHA512

      8bde9ba4572fdd2bbc8266083a292f4212acf9b4b556bac4ee3d3dddbda9c4064276f010b98d59a34cbc2ef9ac49a258aecd3cfd7c10e80ead7fc3cc415fcff8

    • SSDEEP

      1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe09:78SEOtEvwDpjWYvQd2Pp

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks