General

  • Target

    2024-01-23_c5685af853cef131a47ea87b1fd77ef2_cryptolocker

  • Size

    47KB

  • Sample

    240123-ha6x9aghd2

  • MD5

    c5685af853cef131a47ea87b1fd77ef2

  • SHA1

    4625a416d22186c9d8d6fcf09e80ff1c92a2b5aa

  • SHA256

    cd7c0d2d26bf19da350318e5f38ec4ae0e0e3612d8949d63c78c138daf0067fd

  • SHA512

    2e019e6865461dcfb190acae198ed93a9f578bbed012930bc8ba42c5d529038cf2f4cd87f832ce62322e4cfad94a68146031212e838d6823acfd210fe1bfad00

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvgpnuQ3H:6j+1NMOtEvwDpjr8hgpuQ3H

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_c5685af853cef131a47ea87b1fd77ef2_cryptolocker

    • Size

      47KB

    • MD5

      c5685af853cef131a47ea87b1fd77ef2

    • SHA1

      4625a416d22186c9d8d6fcf09e80ff1c92a2b5aa

    • SHA256

      cd7c0d2d26bf19da350318e5f38ec4ae0e0e3612d8949d63c78c138daf0067fd

    • SHA512

      2e019e6865461dcfb190acae198ed93a9f578bbed012930bc8ba42c5d529038cf2f4cd87f832ce62322e4cfad94a68146031212e838d6823acfd210fe1bfad00

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvgpnuQ3H:6j+1NMOtEvwDpjr8hgpuQ3H

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks