General

  • Target

    2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker

  • Size

    35KB

  • Sample

    240214-eked7shf46

  • MD5

    e400c45e20bd0ea114978ec16c4165a4

  • SHA1

    c896b0c080f6dea2f621be2192239f8a29117892

  • SHA256

    1dd0438a6cc6a0c40b1db5ab20efb113dc6c2207200b00a70a193e7074003cf0

  • SHA512

    f4b9f6264478880ae6143e17eeeac129e5bcdb866f84d849c0e605b9cc5d2fd866297025cc95fa459d4f96162a9af980c80a3b438100c943d55fb86b98f5b73e

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18IYW:btB9g/WItCSsAGjX7e9NzW

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker

    • Size

      35KB

    • MD5

      e400c45e20bd0ea114978ec16c4165a4

    • SHA1

      c896b0c080f6dea2f621be2192239f8a29117892

    • SHA256

      1dd0438a6cc6a0c40b1db5ab20efb113dc6c2207200b00a70a193e7074003cf0

    • SHA512

      f4b9f6264478880ae6143e17eeeac129e5bcdb866f84d849c0e605b9cc5d2fd866297025cc95fa459d4f96162a9af980c80a3b438100c943d55fb86b98f5b73e

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18IYW:btB9g/WItCSsAGjX7e9NzW

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks