General

  • Target

    2024-11-21_61dfc57886838017ccce07968f901a59_cryptolocker

  • Size

    64KB

  • Sample

    241121-hk222stqap

  • MD5

    61dfc57886838017ccce07968f901a59

  • SHA1

    f86c94671a8c52edadbb186a2ca1334dd55b588e

  • SHA256

    9a2839b457ca4b105af2064232934b67f42ddfe1f9b456afbb0b4ecdbe8d58e3

  • SHA512

    8612324c858e1ec1f3119ac1ae877289d76c44e5d0ea5bc03c014f01adf155f520ee4fa9aa6fe91c7d210618cb46948f6bb5a965247ccd317e7cabc3e97692b3

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTOOZf:T6a+rdOOtEvwDpjN9

Score
7/10

Malware Config

Targets

    • Target

      2024-11-21_61dfc57886838017ccce07968f901a59_cryptolocker

    • Size

      64KB

    • MD5

      61dfc57886838017ccce07968f901a59

    • SHA1

      f86c94671a8c52edadbb186a2ca1334dd55b588e

    • SHA256

      9a2839b457ca4b105af2064232934b67f42ddfe1f9b456afbb0b4ecdbe8d58e3

    • SHA512

      8612324c858e1ec1f3119ac1ae877289d76c44e5d0ea5bc03c014f01adf155f520ee4fa9aa6fe91c7d210618cb46948f6bb5a965247ccd317e7cabc3e97692b3

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTOOZf:T6a+rdOOtEvwDpjN9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks