General

  • Target

    2024-10-14_52472ef3f3b3956ff78f87d6d158ad8d_cryptolocker

  • Size

    89KB

  • Sample

    241014-cy2esaweka

  • MD5

    52472ef3f3b3956ff78f87d6d158ad8d

  • SHA1

    69ae25c10b0e7f51a64eb4f3c1414c3a2277e7b8

  • SHA256

    005635877b933c9a0d4ea62bb68527f03427ec7bcfad035bb44fa53c5969cad8

  • SHA512

    96de014f9724e167dc750dc37728b11a7225f027cb97f171218ba1cd0db17faafd7b6d580c82c5e142bb0e358d0319ceddf994786fcdc8cca02d1ce1e023b971

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpI:AnBdOOtEvwDpj6zb

Score
7/10

Malware Config

Targets

    • Target

      2024-10-14_52472ef3f3b3956ff78f87d6d158ad8d_cryptolocker

    • Size

      89KB

    • MD5

      52472ef3f3b3956ff78f87d6d158ad8d

    • SHA1

      69ae25c10b0e7f51a64eb4f3c1414c3a2277e7b8

    • SHA256

      005635877b933c9a0d4ea62bb68527f03427ec7bcfad035bb44fa53c5969cad8

    • SHA512

      96de014f9724e167dc750dc37728b11a7225f027cb97f171218ba1cd0db17faafd7b6d580c82c5e142bb0e358d0319ceddf994786fcdc8cca02d1ce1e023b971

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpI:AnBdOOtEvwDpj6zb

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks