General

  • Target

    2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker

  • Size

    32KB

  • Sample

    240217-lk6a9add5s

  • MD5

    5dacbc213af9e39091941de04201c944

  • SHA1

    1a1c781c9be8af09734bd5d5fc6d49862150296d

  • SHA256

    852dc5f4f299ffe71e0537d041a093521d866daff64e548d2e604e36f71eae21

  • SHA512

    ae31fe25504f232b5cd809a8a2f536e23e249680059b2f0a05b79cca6541c567ae6ddc535a2cb1661f499269ad860b3408308cf8e2702159db08d2ba78bb71de

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZL:bAvJCYOOvbRPDEgXRcuM9HGVZL

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker

    • Size

      32KB

    • MD5

      5dacbc213af9e39091941de04201c944

    • SHA1

      1a1c781c9be8af09734bd5d5fc6d49862150296d

    • SHA256

      852dc5f4f299ffe71e0537d041a093521d866daff64e548d2e604e36f71eae21

    • SHA512

      ae31fe25504f232b5cd809a8a2f536e23e249680059b2f0a05b79cca6541c567ae6ddc535a2cb1661f499269ad860b3408308cf8e2702159db08d2ba78bb71de

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZL:bAvJCYOOvbRPDEgXRcuM9HGVZL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks