General

  • Target

    2024-01-23_4663a449825fd1b17d3f52b9eae139f3_cryptolocker

  • Size

    125KB

  • Sample

    240123-pppe3sabam

  • MD5

    4663a449825fd1b17d3f52b9eae139f3

  • SHA1

    2ebd8b0b6331ca67adbf00d565bee9748d8d0651

  • SHA256

    36887f5748ed1768fee6da4fc59aab13b25be1749dda619ec4076db30f34773a

  • SHA512

    c5c4efde66d61fb68f49285446502d1b0dc9776cd55d2a7b90cddb252813eddb7c57ddede751a03634feebd2a887f517e56266f838ecef719fca87f4d8df42e5

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBp2:vCA9OtEvwDpjy

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_4663a449825fd1b17d3f52b9eae139f3_cryptolocker

    • Size

      125KB

    • MD5

      4663a449825fd1b17d3f52b9eae139f3

    • SHA1

      2ebd8b0b6331ca67adbf00d565bee9748d8d0651

    • SHA256

      36887f5748ed1768fee6da4fc59aab13b25be1749dda619ec4076db30f34773a

    • SHA512

      c5c4efde66d61fb68f49285446502d1b0dc9776cd55d2a7b90cddb252813eddb7c57ddede751a03634feebd2a887f517e56266f838ecef719fca87f4d8df42e5

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBp2:vCA9OtEvwDpjy

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks