General

  • Target

    2024-01-29_407020587f4304e49901da05affc00fa_cryptolocker

  • Size

    53KB

  • Sample

    240129-lfmcksgbfp

  • MD5

    407020587f4304e49901da05affc00fa

  • SHA1

    7cfe2c49e950939f3db2e616f4ce64b83b4b575f

  • SHA256

    9c3b53763d121950ea1573daf827b689618ab8ca2b0d1d38271da1177f16d122

  • SHA512

    705aaca54cffddaed71f3695c40846b612565f827deaeac41c92164cc217284377fb4d72b013758d438d1fedb807350714f66aea1cf7dc1a3f8a3c4054f9939e

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv0itW/:vj+jsMQMOtEvwDpj5HH1nw73KOFsi4/

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_407020587f4304e49901da05affc00fa_cryptolocker

    • Size

      53KB

    • MD5

      407020587f4304e49901da05affc00fa

    • SHA1

      7cfe2c49e950939f3db2e616f4ce64b83b4b575f

    • SHA256

      9c3b53763d121950ea1573daf827b689618ab8ca2b0d1d38271da1177f16d122

    • SHA512

      705aaca54cffddaed71f3695c40846b612565f827deaeac41c92164cc217284377fb4d72b013758d438d1fedb807350714f66aea1cf7dc1a3f8a3c4054f9939e

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv0itW/:vj+jsMQMOtEvwDpj5HH1nw73KOFsi4/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks