General

  • Target

    2024-01-23_3fb587284baf557e6276f27ec9901bfd_cryptolocker

  • Size

    40KB

  • Sample

    240123-xen1kafeb6

  • MD5

    3fb587284baf557e6276f27ec9901bfd

  • SHA1

    1271c73bc46ecd7e9a23cd6511736a95b85a2369

  • SHA256

    2edf794a44c3d5538ea5e90f5a57e98e5382aa31663f300cd97b57572e395a77

  • SHA512

    12ef6f82f9d9406329d7bbf5fc6c70d0239ef7d879f1734be19e3ed1932b4047967b1c87db0d56e9e058c9730d6776dc8cafbf0d37a0f86fc0eff4129f55f1ce

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slz:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s5

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_3fb587284baf557e6276f27ec9901bfd_cryptolocker

    • Size

      40KB

    • MD5

      3fb587284baf557e6276f27ec9901bfd

    • SHA1

      1271c73bc46ecd7e9a23cd6511736a95b85a2369

    • SHA256

      2edf794a44c3d5538ea5e90f5a57e98e5382aa31663f300cd97b57572e395a77

    • SHA512

      12ef6f82f9d9406329d7bbf5fc6c70d0239ef7d879f1734be19e3ed1932b4047967b1c87db0d56e9e058c9730d6776dc8cafbf0d37a0f86fc0eff4129f55f1ce

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slz:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks