General

  • Target

    2024-02-19_ead8c90434a9403000d62d30ed969bce_cryptolocker

  • Size

    32KB

  • Sample

    240219-a6e6eage64

  • MD5

    ead8c90434a9403000d62d30ed969bce

  • SHA1

    b3c4c24aefa173b9b9a88476dbfcd4bd0319026d

  • SHA256

    577539a472cff9c914049012b79319002212aac48c556a02eb2b042940c42d5a

  • SHA512

    0147b3b04466886b10dcf23843717d09bf67981a92361f759bc122811fe6110c37eb27f5811925c7c60f9a321eee5e5bfedd425f996e7cad8b628e0f8726dfd9

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2BoRjm:btB9g/WItCSsAGjX7r3Bo4

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_ead8c90434a9403000d62d30ed969bce_cryptolocker

    • Size

      32KB

    • MD5

      ead8c90434a9403000d62d30ed969bce

    • SHA1

      b3c4c24aefa173b9b9a88476dbfcd4bd0319026d

    • SHA256

      577539a472cff9c914049012b79319002212aac48c556a02eb2b042940c42d5a

    • SHA512

      0147b3b04466886b10dcf23843717d09bf67981a92361f759bc122811fe6110c37eb27f5811925c7c60f9a321eee5e5bfedd425f996e7cad8b628e0f8726dfd9

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2BoRjm:btB9g/WItCSsAGjX7r3Bo4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks