General

  • Target

    2024-02-12_649d1cf1c3221824119477db9e88716d_cryptolocker

  • Size

    83KB

  • Sample

    240212-y8n34abf4s

  • MD5

    649d1cf1c3221824119477db9e88716d

  • SHA1

    8b89fca6b51ba3178c01aa60150d22e87ac23947

  • SHA256

    829ebb2614f588194cc8a4a5be5efe53f29cbc58eab31ab1ac2dacd86dba085c

  • SHA512

    ad5dfd81cc52a07b4ce7b0552229647b80ff728c103adfc4ac1bafac18e2d9f02fa14ca3314bdd448e0012deeac5ffa98ba1835d550a4fdc3c7849d9259b1634

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQb:V6a+pOtEvwDpjvp5

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_649d1cf1c3221824119477db9e88716d_cryptolocker

    • Size

      83KB

    • MD5

      649d1cf1c3221824119477db9e88716d

    • SHA1

      8b89fca6b51ba3178c01aa60150d22e87ac23947

    • SHA256

      829ebb2614f588194cc8a4a5be5efe53f29cbc58eab31ab1ac2dacd86dba085c

    • SHA512

      ad5dfd81cc52a07b4ce7b0552229647b80ff728c103adfc4ac1bafac18e2d9f02fa14ca3314bdd448e0012deeac5ffa98ba1835d550a4fdc3c7849d9259b1634

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQb:V6a+pOtEvwDpjvp5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks