General

  • Target

    2024-02-14_a9f1b9d74ef025cd1ae2875e492755b6_cryptolocker

  • Size

    35KB

  • Sample

    240214-vxwf9ahe93

  • MD5

    a9f1b9d74ef025cd1ae2875e492755b6

  • SHA1

    3db4fbe4ee2df806d2eccf50432b92ce5e948801

  • SHA256

    0ee92fef514aa14fca66c81cfe4b1e21ac8d7ae3eedb79736362cb6a71bb1068

  • SHA512

    93dbc1f84551868e730fa79c474d71c4935a2063587e451adf88352d4db96d627c75049b80376b6843ef7833276be11e3247eb6a18a565dc445a9f9064d05250

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183F:btB9g/WItCSsAGjX7e9Nr

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_a9f1b9d74ef025cd1ae2875e492755b6_cryptolocker

    • Size

      35KB

    • MD5

      a9f1b9d74ef025cd1ae2875e492755b6

    • SHA1

      3db4fbe4ee2df806d2eccf50432b92ce5e948801

    • SHA256

      0ee92fef514aa14fca66c81cfe4b1e21ac8d7ae3eedb79736362cb6a71bb1068

    • SHA512

      93dbc1f84551868e730fa79c474d71c4935a2063587e451adf88352d4db96d627c75049b80376b6843ef7833276be11e3247eb6a18a565dc445a9f9064d05250

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183F:btB9g/WItCSsAGjX7e9Nr

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks