General

  • Target

    2024-02-17_22f725360fbdd96afe284ecce1363e87_cryptolocker

  • Size

    31KB

  • Sample

    240217-kb39vsdd79

  • MD5

    22f725360fbdd96afe284ecce1363e87

  • SHA1

    75fa69da7def0dd2c1af7eb453a162705b701a1a

  • SHA256

    fa20ca0db43c93aced4221697bd2e28fc84375210add0946203abcfb2442b1ce

  • SHA512

    d4286821ebc321af4313d23228e4352a58728505e5b085cc1dac6746e2a2de0166571a4e7bdb88a03292ac849688ce8d096655aa36811b2060340e5cee87ab5e

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9Rso8:b7o/2n1TCraU6GD1a4Xt9Rso8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_22f725360fbdd96afe284ecce1363e87_cryptolocker

    • Size

      31KB

    • MD5

      22f725360fbdd96afe284ecce1363e87

    • SHA1

      75fa69da7def0dd2c1af7eb453a162705b701a1a

    • SHA256

      fa20ca0db43c93aced4221697bd2e28fc84375210add0946203abcfb2442b1ce

    • SHA512

      d4286821ebc321af4313d23228e4352a58728505e5b085cc1dac6746e2a2de0166571a4e7bdb88a03292ac849688ce8d096655aa36811b2060340e5cee87ab5e

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9Rso8:b7o/2n1TCraU6GD1a4Xt9Rso8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks