General

  • Target

    2024-01-29_318937373ae596aa05240a69e2493371_cryptolocker

  • Size

    44KB

  • Sample

    240129-twtqladhg3

  • MD5

    318937373ae596aa05240a69e2493371

  • SHA1

    55aed17fa4e8494c965dfdd12afc88261c080722

  • SHA256

    32dcbe867194c63a481277b78aa340f0221122be2368936652348ca3223839ba

  • SHA512

    e63d88dd76cf157783026806bc84d65c984e06159f95f4e74f5303a3350c275424e7f384c738dc1d7b4853be0c145c1ef42e314244b1739daa9c182e8b6f5995

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlPvc:bgGYcA/53GAA6y37Qs

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_318937373ae596aa05240a69e2493371_cryptolocker

    • Size

      44KB

    • MD5

      318937373ae596aa05240a69e2493371

    • SHA1

      55aed17fa4e8494c965dfdd12afc88261c080722

    • SHA256

      32dcbe867194c63a481277b78aa340f0221122be2368936652348ca3223839ba

    • SHA512

      e63d88dd76cf157783026806bc84d65c984e06159f95f4e74f5303a3350c275424e7f384c738dc1d7b4853be0c145c1ef42e314244b1739daa9c182e8b6f5995

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlPvc:bgGYcA/53GAA6y37Qs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks