General

  • Target

    2024-01-27_a103853a08b84eaafb405fe29784786e_cryptolocker

  • Size

    125KB

  • Sample

    240127-ybnq3aafb5

  • MD5

    a103853a08b84eaafb405fe29784786e

  • SHA1

    c7046b07b62bf00ecb1d9f55c5f0c0628edbdc3a

  • SHA256

    ab3e2ce039ff5b197180d69055ebf5b9b46d0705f6737be170ab7c24bc1ab2d2

  • SHA512

    f48b7d43fc88343dabe424fac882d32692e59989c3ba15aa2aaf82917c0b531ca77d959341c17255b2150f20fbbae72dd4f2fb23203e938a3eb62aaae9b5233e

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpBQ:vCA9OtEvwDpjm

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_a103853a08b84eaafb405fe29784786e_cryptolocker

    • Size

      125KB

    • MD5

      a103853a08b84eaafb405fe29784786e

    • SHA1

      c7046b07b62bf00ecb1d9f55c5f0c0628edbdc3a

    • SHA256

      ab3e2ce039ff5b197180d69055ebf5b9b46d0705f6737be170ab7c24bc1ab2d2

    • SHA512

      f48b7d43fc88343dabe424fac882d32692e59989c3ba15aa2aaf82917c0b531ca77d959341c17255b2150f20fbbae72dd4f2fb23203e938a3eb62aaae9b5233e

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpBQ:vCA9OtEvwDpjm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks