General

  • Target

    2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker

  • Size

    34KB

  • Sample

    240212-rea6tafe6v

  • MD5

    fba70ce59d790880a26714bcbe43bbe4

  • SHA1

    aa756201012668ace3d82f2b0bd0941006be7592

  • SHA256

    76a3bbfba0469631fbf21b79d6349268083addd4710edd570807312049a9642f

  • SHA512

    cb5edc3e564eb109db78f7e2fec15d5106c8b0c2961ed12f75cb5640759cae9009824e8cb176ca10242fafc7596236d158804803c7c83fd9296bb0d7e11a747f

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMn0s:btB9g/WItCSsAGjX7e9N8sP

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker

    • Size

      34KB

    • MD5

      fba70ce59d790880a26714bcbe43bbe4

    • SHA1

      aa756201012668ace3d82f2b0bd0941006be7592

    • SHA256

      76a3bbfba0469631fbf21b79d6349268083addd4710edd570807312049a9642f

    • SHA512

      cb5edc3e564eb109db78f7e2fec15d5106c8b0c2961ed12f75cb5640759cae9009824e8cb176ca10242fafc7596236d158804803c7c83fd9296bb0d7e11a747f

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMn0s:btB9g/WItCSsAGjX7e9N8sP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks