General

  • Target

    2024-11-02_03772f5fc3a088621b6ab22f254765fa_cryptolocker

  • Size

    95KB

  • Sample

    241102-g48hhazdrd

  • MD5

    03772f5fc3a088621b6ab22f254765fa

  • SHA1

    bbeaaacee5faa10691a3df3bb55868e06f741f88

  • SHA256

    106e3c901369202fac3960133614d14242b4b8dc53b7ee2dd89074527663c86d

  • SHA512

    5ac5b6dec6befe7d8c0012c7bfe8996a7f123a8c466d80478365cccbd917a90fc5ea7ddc290ab0c47204532e7e6913a289ca2b0bded0c926813c851134a91db5

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kAd0:zCsanOtEvwDpjBO

Score
7/10

Malware Config

Targets

    • Target

      2024-11-02_03772f5fc3a088621b6ab22f254765fa_cryptolocker

    • Size

      95KB

    • MD5

      03772f5fc3a088621b6ab22f254765fa

    • SHA1

      bbeaaacee5faa10691a3df3bb55868e06f741f88

    • SHA256

      106e3c901369202fac3960133614d14242b4b8dc53b7ee2dd89074527663c86d

    • SHA512

      5ac5b6dec6befe7d8c0012c7bfe8996a7f123a8c466d80478365cccbd917a90fc5ea7ddc290ab0c47204532e7e6913a289ca2b0bded0c926813c851134a91db5

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kAd0:zCsanOtEvwDpjBO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks