General

  • Target

    2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker

  • Size

    76KB

  • Sample

    240919-c8ad2swhrd

  • MD5

    1dedae0b43aaeaa7952addec722389b1

  • SHA1

    d9f91fa5d726ca5bfe20ce6af3656886dca29107

  • SHA256

    c5ada925f2b4564a822b2de4b8eb62ed13d6f53e4ded28825db07e3b5c6489ec

  • SHA512

    2bbf21bd3db8dc184893eb624b7e1609382e0e9b8feefe46dd4ce9100dc154e5804de0192bd3079247fcd573237d9ab0e9ce6b73bdcfb975f419826c7da2831c

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gc:1nK6a+qdOOtEvwDpjh

Score
7/10

Malware Config

Targets

    • Target

      2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker

    • Size

      76KB

    • MD5

      1dedae0b43aaeaa7952addec722389b1

    • SHA1

      d9f91fa5d726ca5bfe20ce6af3656886dca29107

    • SHA256

      c5ada925f2b4564a822b2de4b8eb62ed13d6f53e4ded28825db07e3b5c6489ec

    • SHA512

      2bbf21bd3db8dc184893eb624b7e1609382e0e9b8feefe46dd4ce9100dc154e5804de0192bd3079247fcd573237d9ab0e9ce6b73bdcfb975f419826c7da2831c

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gc:1nK6a+qdOOtEvwDpjh

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks