General

  • Target

    2024-01-18_3f470bb25ba18388db6f61a49f4d3022_cryptolocker

  • Size

    47KB

  • Sample

    240118-2lqj7acagj

  • MD5

    3f470bb25ba18388db6f61a49f4d3022

  • SHA1

    fc3ff3ad0388bc39353accf97719a9af799a8840

  • SHA256

    d2e3eb0c79b39c36d4cc8d9ce998086486f4f8494c261198ee6df4182377a7e1

  • SHA512

    d810666feab72f6ad919b2aeb72eceeb2c0032addfdbcdea0251ab708978aaf9e99dfaece574773842239c586f0073d22383e17ec6b181dd691c6b9ffe0c6d10

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTB:79mqyNhQMOtEvwDpjBxe8u

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_3f470bb25ba18388db6f61a49f4d3022_cryptolocker

    • Size

      47KB

    • MD5

      3f470bb25ba18388db6f61a49f4d3022

    • SHA1

      fc3ff3ad0388bc39353accf97719a9af799a8840

    • SHA256

      d2e3eb0c79b39c36d4cc8d9ce998086486f4f8494c261198ee6df4182377a7e1

    • SHA512

      d810666feab72f6ad919b2aeb72eceeb2c0032addfdbcdea0251ab708978aaf9e99dfaece574773842239c586f0073d22383e17ec6b181dd691c6b9ffe0c6d10

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTB:79mqyNhQMOtEvwDpjBxe8u

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks