General

  • Target

    2024-01-27_2ed5bd41ce08b8ad14ed0546193ee510_cryptolocker

  • Size

    39KB

  • Sample

    240127-y61dcadben

  • MD5

    2ed5bd41ce08b8ad14ed0546193ee510

  • SHA1

    12099002c426350602b644a1ad60e06fa1242440

  • SHA256

    e65201b5cf3c98f7c1ca33e910f09d3006ca53771f26acf7135ef1a9506183c8

  • SHA512

    669c88977f2aa6cdbe5171cd3f64569780dd0328a05a1ecf06dedd5a913fd66e16022283e29d229671be5abd2eb3f72244f45c3fbbfe6881b0bdf7f2e55571fa

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLJJE+:ZzFbxmLPWQMOtEvwDpjLeU3E+

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_2ed5bd41ce08b8ad14ed0546193ee510_cryptolocker

    • Size

      39KB

    • MD5

      2ed5bd41ce08b8ad14ed0546193ee510

    • SHA1

      12099002c426350602b644a1ad60e06fa1242440

    • SHA256

      e65201b5cf3c98f7c1ca33e910f09d3006ca53771f26acf7135ef1a9506183c8

    • SHA512

      669c88977f2aa6cdbe5171cd3f64569780dd0328a05a1ecf06dedd5a913fd66e16022283e29d229671be5abd2eb3f72244f45c3fbbfe6881b0bdf7f2e55571fa

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLJJE+:ZzFbxmLPWQMOtEvwDpjLeU3E+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks