General

  • Target

    2024-01-27_731579c183dce7462015abb58b606d9c_cryptolocker

  • Size

    39KB

  • Sample

    240127-sxq6esgfdp

  • MD5

    731579c183dce7462015abb58b606d9c

  • SHA1

    30ca7469a59fbbe1b168f1d97183aae671260761

  • SHA256

    cf45c24d484f566eeadecf553a90122632f7c2c5e57a8276f056d5c5ce06ff9a

  • SHA512

    493210561c6f0d4c004b42e3e78dd7bc58bcd60abd4a187040bceccda3ea145b5225542546a419910694093ebd9b7b647cecdbfcd72da0148e617af8544e3805

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu529hyn:bgGYcA/53GADw8Ch94

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_731579c183dce7462015abb58b606d9c_cryptolocker

    • Size

      39KB

    • MD5

      731579c183dce7462015abb58b606d9c

    • SHA1

      30ca7469a59fbbe1b168f1d97183aae671260761

    • SHA256

      cf45c24d484f566eeadecf553a90122632f7c2c5e57a8276f056d5c5ce06ff9a

    • SHA512

      493210561c6f0d4c004b42e3e78dd7bc58bcd60abd4a187040bceccda3ea145b5225542546a419910694093ebd9b7b647cecdbfcd72da0148e617af8544e3805

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu529hyn:bgGYcA/53GADw8Ch94

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks