General

  • Target

    2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker

  • Size

    46KB

  • Sample

    240125-nnfacafehm

  • MD5

    af1e7bdf89dadc65caeebe5143502b94

  • SHA1

    61afb8de3b61675ea9cb97106739a39a1b5f4269

  • SHA256

    e15d1764d657b46662117c84bcd4ca46e7041819e8d53f74223d11f1bbae52b2

  • SHA512

    ee61c24ec4757ad251b4ba1c6cf96a50767cbd90b27628b1720ea85541dcea3376142071c8a453ee63ef5e88e29646cbe42b8cf340c09d7536da555152d4c45d

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS4:bgGYcA/53GAA6y37nbS4

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker

    • Size

      46KB

    • MD5

      af1e7bdf89dadc65caeebe5143502b94

    • SHA1

      61afb8de3b61675ea9cb97106739a39a1b5f4269

    • SHA256

      e15d1764d657b46662117c84bcd4ca46e7041819e8d53f74223d11f1bbae52b2

    • SHA512

      ee61c24ec4757ad251b4ba1c6cf96a50767cbd90b27628b1720ea85541dcea3376142071c8a453ee63ef5e88e29646cbe42b8cf340c09d7536da555152d4c45d

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS4:bgGYcA/53GAA6y37nbS4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks