General

  • Target

    2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker

  • Size

    45KB

  • Sample

    240220-kay9hsdf9v

  • MD5

    26ce6ebbf4398334517eeebb88dd916f

  • SHA1

    c5f2a28bf3fad171585a967ac5ac9b67c9106b9b

  • SHA256

    0cb3e95eca1e61c8179cc816c34792fd851320ef160d050dd19d2e1684a72b6c

  • SHA512

    67775eb57cb8456ae17467ec4ba3413db385f8296046e98e9aa731ebab496a7650bc339afd16028793c71d172d92559604308a08a8ccf6949649e3608086ab4a

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlNobNQ:bgGYcA/53GAA6y37Qeb2

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker

    • Size

      45KB

    • MD5

      26ce6ebbf4398334517eeebb88dd916f

    • SHA1

      c5f2a28bf3fad171585a967ac5ac9b67c9106b9b

    • SHA256

      0cb3e95eca1e61c8179cc816c34792fd851320ef160d050dd19d2e1684a72b6c

    • SHA512

      67775eb57cb8456ae17467ec4ba3413db385f8296046e98e9aa731ebab496a7650bc339afd16028793c71d172d92559604308a08a8ccf6949649e3608086ab4a

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlNobNQ:bgGYcA/53GAA6y37Qeb2

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks