General

  • Target

    2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker

  • Size

    40KB

  • Sample

    240219-yn88jacf53

  • MD5

    d421edf02f4b087221daa6abe9dae3e8

  • SHA1

    77deacbab21ba188466638a078cc10ac37a8c560

  • SHA256

    cedf411c8ff22328ec2d0a38a63fc49bbbe4f17b056bef49a3fe083deb893af8

  • SHA512

    69da9f2a52aad52bc877cec87047cd882a6060b63a5182986e2f006bb54831709d399a8ab474c2c78a8a6db1448d7bf879db57afd59d4c87fe882da300cd3ed3

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFP:bgGYcA/53GADw8ClrcnFP

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker

    • Size

      40KB

    • MD5

      d421edf02f4b087221daa6abe9dae3e8

    • SHA1

      77deacbab21ba188466638a078cc10ac37a8c560

    • SHA256

      cedf411c8ff22328ec2d0a38a63fc49bbbe4f17b056bef49a3fe083deb893af8

    • SHA512

      69da9f2a52aad52bc877cec87047cd882a6060b63a5182986e2f006bb54831709d399a8ab474c2c78a8a6db1448d7bf879db57afd59d4c87fe882da300cd3ed3

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFP:bgGYcA/53GADw8ClrcnFP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks