General

  • Target

    2024-02-12_5d137527c0ba13d90f13544a9435d752_cryptolocker

  • Size

    38KB

  • Sample

    240212-x4brjacg74

  • MD5

    5d137527c0ba13d90f13544a9435d752

  • SHA1

    3560ad201fe10805258769618151973720c32feb

  • SHA256

    5a0e82a48f1b99e071672a54fdc682b15d68a1f0ca5f2c26d40fa059b2ceacf0

  • SHA512

    9d1999240224e2e099850ebd0ac94a99f82e740576d87b469452109435f6c9bd22128eca93b4df220ff785780c1ab683ce3e9715c1badc36e9ab135fd491d389

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcf1Y:X6QFElP6n+gJQMOtEvwDpjBsYK6m

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_5d137527c0ba13d90f13544a9435d752_cryptolocker

    • Size

      38KB

    • MD5

      5d137527c0ba13d90f13544a9435d752

    • SHA1

      3560ad201fe10805258769618151973720c32feb

    • SHA256

      5a0e82a48f1b99e071672a54fdc682b15d68a1f0ca5f2c26d40fa059b2ceacf0

    • SHA512

      9d1999240224e2e099850ebd0ac94a99f82e740576d87b469452109435f6c9bd22128eca93b4df220ff785780c1ab683ce3e9715c1badc36e9ab135fd491d389

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcf1Y:X6QFElP6n+gJQMOtEvwDpjBsYK6m

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks