General

  • Target

    2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker

  • Size

    41KB

  • Sample

    240127-x6rwjaccbp

  • MD5

    3d58d73eebf1bb5d8d7bd5e3b5cb1e21

  • SHA1

    d8c2a50223a863e6b86993356c85c2e5b3d8b1c8

  • SHA256

    5662f0e6361e0fe939b9425edab2f34c28abc4776d7bb17e3e340c7a4f56b9d3

  • SHA512

    d6f59f9a9f0cd4646b74efb105ded3644f2f5bafe070854014ed279c20f5db8d59b97819769573290e1eb6f2c6ea6e321eae31461f3aaf3293188ed48cf2d450

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0:bc/y2lkF0+Bj0

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker

    • Size

      41KB

    • MD5

      3d58d73eebf1bb5d8d7bd5e3b5cb1e21

    • SHA1

      d8c2a50223a863e6b86993356c85c2e5b3d8b1c8

    • SHA256

      5662f0e6361e0fe939b9425edab2f34c28abc4776d7bb17e3e340c7a4f56b9d3

    • SHA512

      d6f59f9a9f0cd4646b74efb105ded3644f2f5bafe070854014ed279c20f5db8d59b97819769573290e1eb6f2c6ea6e321eae31461f3aaf3293188ed48cf2d450

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0:bc/y2lkF0+Bj0

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks