General

  • Target

    2024-01-23_4841082d88820743acc6d23299b5b670_cryptolocker

  • Size

    44KB

  • Sample

    240123-w5rnpsfbc5

  • MD5

    4841082d88820743acc6d23299b5b670

  • SHA1

    9ea27e545edcf116f6cd661c0f7a8ccb1c775b02

  • SHA256

    9afd8f22201b2b4c6cb74565969ec0d190590773e069860e3b75135501b634eb

  • SHA512

    503607c4a446692aca751ec0c1941119fadc0a7a4f22888e1fd5da2541b65388ca59db3f79b7e8bb8bd89298696d609b24ff0368641bd95b15670ba99dbe747f

  • SSDEEP

    768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4l:btB9g/xtCSKfxLIc/C4l

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_4841082d88820743acc6d23299b5b670_cryptolocker

    • Size

      44KB

    • MD5

      4841082d88820743acc6d23299b5b670

    • SHA1

      9ea27e545edcf116f6cd661c0f7a8ccb1c775b02

    • SHA256

      9afd8f22201b2b4c6cb74565969ec0d190590773e069860e3b75135501b634eb

    • SHA512

      503607c4a446692aca751ec0c1941119fadc0a7a4f22888e1fd5da2541b65388ca59db3f79b7e8bb8bd89298696d609b24ff0368641bd95b15670ba99dbe747f

    • SSDEEP

      768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4l:btB9g/xtCSKfxLIc/C4l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks