General

  • Target

    2024-09-19_b670c00647ed2421faec647181a743b9_cryptolocker

  • Size

    76KB

  • Sample

    240919-f84jnstclk

  • MD5

    b670c00647ed2421faec647181a743b9

  • SHA1

    9735472f608138a1647faf4157901b71a2b98b3b

  • SHA256

    03e83f47efbbec7a8a3d16ed54af8fb4cf3c1f6e285558e3df9143402c2a4a4e

  • SHA512

    298f5a6e66af1c651379dd6f6f784f86f9e94803adaf0b43f8243375dea7b1aefe7819b0b3be303f5553dcac1c35b0457fb47816bd95200055052fff97afeea2

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gp:1nK6a+qdOOtEvwDpjE

Score
7/10

Malware Config

Targets

    • Target

      2024-09-19_b670c00647ed2421faec647181a743b9_cryptolocker

    • Size

      76KB

    • MD5

      b670c00647ed2421faec647181a743b9

    • SHA1

      9735472f608138a1647faf4157901b71a2b98b3b

    • SHA256

      03e83f47efbbec7a8a3d16ed54af8fb4cf3c1f6e285558e3df9143402c2a4a4e

    • SHA512

      298f5a6e66af1c651379dd6f6f784f86f9e94803adaf0b43f8243375dea7b1aefe7819b0b3be303f5553dcac1c35b0457fb47816bd95200055052fff97afeea2

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gp:1nK6a+qdOOtEvwDpjE

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks