General

  • Target

    2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker

  • Size

    40KB

  • Sample

    240203-dyxbhaacbj

  • MD5

    23146128a3c61237876a6977e3e6e000

  • SHA1

    9987deeb25ec2a0dbd077cfe26d9bb43a5cab39c

  • SHA256

    d559a2c884b2fc036f91c41210612245e54a25751ddd9a5effbcb22099398df2

  • SHA512

    3779d85ffc7a2a4606597f5e30ff7640ec5589bc1190b310991e69e35376c7e853ccfbbbce1aa9dcaccbe810b50afa2556d94ab51bc77f213f35aa9128ed643f

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpN:bc/y2lm6Y0AqJ51VN

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker

    • Size

      40KB

    • MD5

      23146128a3c61237876a6977e3e6e000

    • SHA1

      9987deeb25ec2a0dbd077cfe26d9bb43a5cab39c

    • SHA256

      d559a2c884b2fc036f91c41210612245e54a25751ddd9a5effbcb22099398df2

    • SHA512

      3779d85ffc7a2a4606597f5e30ff7640ec5589bc1190b310991e69e35376c7e853ccfbbbce1aa9dcaccbe810b50afa2556d94ab51bc77f213f35aa9128ed643f

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpN:bc/y2lm6Y0AqJ51VN

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks