General

  • Target

    2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker

  • Size

    385KB

  • Sample

    240219-t6ttcagh85

  • MD5

    86ed39b78e1e0dd5aa59426b3ab0830c

  • SHA1

    079493b69239b69e2b5459b402e737df546a04f2

  • SHA256

    a21472cef2468b505b2eb0b7011b2f4e96aa3e13b5ecea99acf5c01bb48e371c

  • SHA512

    2e28cf18f3239a7c859091fef3989c2f9b159898a22f276dc6a30da76a3175716a1e2e204c52e618bf7619a484493b61adf4526dd1b145e61a30c00431eb9231

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXh:nnOflT/ZFIjBz3xjTxynGUOUhXh

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker

    • Size

      385KB

    • MD5

      86ed39b78e1e0dd5aa59426b3ab0830c

    • SHA1

      079493b69239b69e2b5459b402e737df546a04f2

    • SHA256

      a21472cef2468b505b2eb0b7011b2f4e96aa3e13b5ecea99acf5c01bb48e371c

    • SHA512

      2e28cf18f3239a7c859091fef3989c2f9b159898a22f276dc6a30da76a3175716a1e2e204c52e618bf7619a484493b61adf4526dd1b145e61a30c00431eb9231

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXh:nnOflT/ZFIjBz3xjTxynGUOUhXh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks