General

  • Target

    2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker

  • Size

    40KB

  • Sample

    240129-awsnraebe8

  • MD5

    e32aba8542f128427ad86d457f299097

  • SHA1

    5e0d4c4bb3e1d0a03536a426f97598a4be177d27

  • SHA256

    3f9776bd5fb5386b0d7e90b6ac68c736d9be44e1e0b5dc8e693ff6063fca4228

  • SHA512

    cc01e0aae2ae2dfee5ca7cb5b88aae5dc21380e79616ca499b3f17ade814f229afe7ff192c2fb3410c68aef619fdcbbe1fab870fa96bcf129ee328ca1e6ca2e2

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxLlA:79inqyNR/QtOOtEvwDpjBKcmfxC

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker

    • Size

      40KB

    • MD5

      e32aba8542f128427ad86d457f299097

    • SHA1

      5e0d4c4bb3e1d0a03536a426f97598a4be177d27

    • SHA256

      3f9776bd5fb5386b0d7e90b6ac68c736d9be44e1e0b5dc8e693ff6063fca4228

    • SHA512

      cc01e0aae2ae2dfee5ca7cb5b88aae5dc21380e79616ca499b3f17ade814f229afe7ff192c2fb3410c68aef619fdcbbe1fab870fa96bcf129ee328ca1e6ca2e2

    • SSDEEP

      384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxLlA:79inqyNR/QtOOtEvwDpjBKcmfxC

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks