General

  • Target

    2024-01-19_8d24e22847becac160c4fc9a8d12ccce_cryptolocker

  • Size

    124KB

  • Sample

    240119-l79bescde8

  • MD5

    8d24e22847becac160c4fc9a8d12ccce

  • SHA1

    8169032445a1663bccab9cf18597ddabcb950180

  • SHA256

    62f070b7d03773977e493258f14c5d9fa0ba86b0302c772f219f3436771bb563

  • SHA512

    33dbe14b13d48dcd6c0cb0dc6c35598ec77b36edcb8321a4f447005c9d4daa931ceb90173a0053055db45779f430992c90887a2f40c2938b8c0580e9e6e212ed

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpd:vCA9OtEvwDpjh

Score
10/10

Malware Config

Targets

    • Target

      2024-01-19_8d24e22847becac160c4fc9a8d12ccce_cryptolocker

    • Size

      124KB

    • MD5

      8d24e22847becac160c4fc9a8d12ccce

    • SHA1

      8169032445a1663bccab9cf18597ddabcb950180

    • SHA256

      62f070b7d03773977e493258f14c5d9fa0ba86b0302c772f219f3436771bb563

    • SHA512

      33dbe14b13d48dcd6c0cb0dc6c35598ec77b36edcb8321a4f447005c9d4daa931ceb90173a0053055db45779f430992c90887a2f40c2938b8c0580e9e6e212ed

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpd:vCA9OtEvwDpjh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks