General

  • Target

    2024-10-09_479c7b8611200c673df38576858f3279_cryptolocker

  • Size

    95KB

  • Sample

    241009-e6khca1gja

  • MD5

    479c7b8611200c673df38576858f3279

  • SHA1

    34b3ac105ff1f16971855d9b0817972948c5610b

  • SHA256

    96a8b7da62615983b56201ef4e9db92dc51b44784c4e10686b8dce5aa22d22d5

  • SHA512

    2412a3446d8a54df5cad3fda4d7006eadbe496bb8147387a40ebe5d247261389ee8e23ce5722b3275ebc69ae9b6d8b7a41d513ecd9d1ada369e9f1f55532a4fd

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuvQG:zCsanOtEvwDpjd

Score
7/10

Malware Config

Targets

    • Target

      2024-10-09_479c7b8611200c673df38576858f3279_cryptolocker

    • Size

      95KB

    • MD5

      479c7b8611200c673df38576858f3279

    • SHA1

      34b3ac105ff1f16971855d9b0817972948c5610b

    • SHA256

      96a8b7da62615983b56201ef4e9db92dc51b44784c4e10686b8dce5aa22d22d5

    • SHA512

      2412a3446d8a54df5cad3fda4d7006eadbe496bb8147387a40ebe5d247261389ee8e23ce5722b3275ebc69ae9b6d8b7a41d513ecd9d1ada369e9f1f55532a4fd

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuvQG:zCsanOtEvwDpjd

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks