General

  • Target

    2024-09-19_eb1bcd5e6869043f4685ae587f87a6a9_cryptolocker

  • Size

    96KB

  • Sample

    240919-ha51ysvflc

  • MD5

    eb1bcd5e6869043f4685ae587f87a6a9

  • SHA1

    29f913ab7a94e2873c01dc73e97667ffc903b63e

  • SHA256

    9a541d40a95502211d000ec10b6d75ef6aaf7e335e06c82fb2bb850e55f3f3fe

  • SHA512

    e2d950a062fd7cdec40294eaa56833ca75b68ba3954008ec88e2459d26ecdd1c017778b7644fcf3eee99003611cdc30345e6e9d1fa544a1cda889e158c02e970

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp+ofI5MN:AnBdOOtEvwDpj6zG

Score
7/10

Malware Config

Targets

    • Target

      2024-09-19_eb1bcd5e6869043f4685ae587f87a6a9_cryptolocker

    • Size

      96KB

    • MD5

      eb1bcd5e6869043f4685ae587f87a6a9

    • SHA1

      29f913ab7a94e2873c01dc73e97667ffc903b63e

    • SHA256

      9a541d40a95502211d000ec10b6d75ef6aaf7e335e06c82fb2bb850e55f3f3fe

    • SHA512

      e2d950a062fd7cdec40294eaa56833ca75b68ba3954008ec88e2459d26ecdd1c017778b7644fcf3eee99003611cdc30345e6e9d1fa544a1cda889e158c02e970

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp+ofI5MN:AnBdOOtEvwDpj6zG

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks