General

  • Target

    2024-02-20_9dce93841835035ca28de93991523023_cryptolocker

  • Size

    40KB

  • Sample

    240220-je1sgadc7x

  • MD5

    9dce93841835035ca28de93991523023

  • SHA1

    ef794fcf03052bd8b994d4d8ee9c6bc2fcb96e47

  • SHA256

    7dd6d7d58c4116e510cafbdbe09bca4886166437590321dc2d07f1d8de513734

  • SHA512

    07e0e6a9153300cf968092809342af002c0ee624e5c3b78dcba75ecc8d585eb61fb3a4574770546210e08054ee3d20fb277fb9ba5f6ee43e84148d83debb1d28

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXfS:6j+1NMOtEvwDpjrR2XfS

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_9dce93841835035ca28de93991523023_cryptolocker

    • Size

      40KB

    • MD5

      9dce93841835035ca28de93991523023

    • SHA1

      ef794fcf03052bd8b994d4d8ee9c6bc2fcb96e47

    • SHA256

      7dd6d7d58c4116e510cafbdbe09bca4886166437590321dc2d07f1d8de513734

    • SHA512

      07e0e6a9153300cf968092809342af002c0ee624e5c3b78dcba75ecc8d585eb61fb3a4574770546210e08054ee3d20fb277fb9ba5f6ee43e84148d83debb1d28

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXfS:6j+1NMOtEvwDpjrR2XfS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks