General

  • Target

    2024-01-27_1709b8395cc65819b228a0e932651957_cryptolocker

  • Size

    41KB

  • Sample

    240127-kamwgsabak

  • MD5

    1709b8395cc65819b228a0e932651957

  • SHA1

    ba8693f409718fe67ecf0468fa607a8df7fa5b52

  • SHA256

    1022ff593ab0da9cb2185bc66d4411aa2fed6fc147f7f195f43a9d3b7d5e7c76

  • SHA512

    a96a512d2b260cdca4a2f44d141fe44e3004f19be260ea7d12867773b9c9707e13cdfd50ab287e6e830b830a7e837af52025eee3c15d9a088ffca936d182efd6

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq4:bc/y2lkF0+Bj4

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_1709b8395cc65819b228a0e932651957_cryptolocker

    • Size

      41KB

    • MD5

      1709b8395cc65819b228a0e932651957

    • SHA1

      ba8693f409718fe67ecf0468fa607a8df7fa5b52

    • SHA256

      1022ff593ab0da9cb2185bc66d4411aa2fed6fc147f7f195f43a9d3b7d5e7c76

    • SHA512

      a96a512d2b260cdca4a2f44d141fe44e3004f19be260ea7d12867773b9c9707e13cdfd50ab287e6e830b830a7e837af52025eee3c15d9a088ffca936d182efd6

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq4:bc/y2lkF0+Bj4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks