General

  • Target

    2024-01-23_65a56f95bd54b00e37ba554f0e23bd88_cryptolocker

  • Size

    79KB

  • Sample

    240123-ar9rgaebhn

  • MD5

    65a56f95bd54b00e37ba554f0e23bd88

  • SHA1

    64ce8b69e9e9c63a085f5a76aa0ecd8ebe39ae64

  • SHA256

    abfd643f72249a9bad99cdf8e709e8500e4272e6551cdf7a0a2f670f14a9146f

  • SHA512

    ebd0bb2231b9b591d03ab49d4ee6622cb6c9154ed9aa84c02475ef30f2a31e7568220731136ceaf69f07d763c4790d01cf2ce958965d4a6a6bb601bd255d6232

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHum:vCjsIOtEvwDpj5H9YvQd2r

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_65a56f95bd54b00e37ba554f0e23bd88_cryptolocker

    • Size

      79KB

    • MD5

      65a56f95bd54b00e37ba554f0e23bd88

    • SHA1

      64ce8b69e9e9c63a085f5a76aa0ecd8ebe39ae64

    • SHA256

      abfd643f72249a9bad99cdf8e709e8500e4272e6551cdf7a0a2f670f14a9146f

    • SHA512

      ebd0bb2231b9b591d03ab49d4ee6622cb6c9154ed9aa84c02475ef30f2a31e7568220731136ceaf69f07d763c4790d01cf2ce958965d4a6a6bb601bd255d6232

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHum:vCjsIOtEvwDpj5H9YvQd2r

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks