General

  • Target

    2024-02-12_28f52887f40540a493b4a65349e1b0b3_cryptolocker

  • Size

    68KB

  • Sample

    240212-y6scqsdc73

  • MD5

    28f52887f40540a493b4a65349e1b0b3

  • SHA1

    b224570f9c5e79fd339e0f7576c05be934239e73

  • SHA256

    fa08e25db9786599c188b009e009d3672cad2fa8c0c09ebf7cf71efd1970c5d4

  • SHA512

    89accb5c1bbbcd42efb65cd1f0f2636874d57d96782167bbd95d28965b0071b849428f5dab16dd51232521d609cbbbfe5404ac6cfbe586883a5af6f831de5713

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNa:DW60sllyWOtEvwDpjwF852

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_28f52887f40540a493b4a65349e1b0b3_cryptolocker

    • Size

      68KB

    • MD5

      28f52887f40540a493b4a65349e1b0b3

    • SHA1

      b224570f9c5e79fd339e0f7576c05be934239e73

    • SHA256

      fa08e25db9786599c188b009e009d3672cad2fa8c0c09ebf7cf71efd1970c5d4

    • SHA512

      89accb5c1bbbcd42efb65cd1f0f2636874d57d96782167bbd95d28965b0071b849428f5dab16dd51232521d609cbbbfe5404ac6cfbe586883a5af6f831de5713

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNa:DW60sllyWOtEvwDpjwF852

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks