General

  • Target

    2024-02-14_1161dc2062832dce91c35728bc54fa9b_cryptolocker

  • Size

    48KB

  • Sample

    240214-arew4adh22

  • MD5

    1161dc2062832dce91c35728bc54fa9b

  • SHA1

    b0512255989dc6735e6eca8c6e77fe1a8c5d90ab

  • SHA256

    d2ce39beb832342b1201677db4421754ae1cc0cb135eea23af0e8e4c9ed8711b

  • SHA512

    02bc090ab8cc177ef78099fd8f91a9808f66f95a557941771d6e692ded6c77d1980ff68bef730d72ef641c0220a425eca374bf8e5d9336840ee9f43d00037e5b

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakzf:V6a+pOtEvwDpjS

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_1161dc2062832dce91c35728bc54fa9b_cryptolocker

    • Size

      48KB

    • MD5

      1161dc2062832dce91c35728bc54fa9b

    • SHA1

      b0512255989dc6735e6eca8c6e77fe1a8c5d90ab

    • SHA256

      d2ce39beb832342b1201677db4421754ae1cc0cb135eea23af0e8e4c9ed8711b

    • SHA512

      02bc090ab8cc177ef78099fd8f91a9808f66f95a557941771d6e692ded6c77d1980ff68bef730d72ef641c0220a425eca374bf8e5d9336840ee9f43d00037e5b

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakzf:V6a+pOtEvwDpjS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks