General

  • Target

    2024-02-20_5147f664a5a6448807b630f7cfac612c_cryptolocker

  • Size

    44KB

  • Sample

    240220-ryy2zshf7w

  • MD5

    5147f664a5a6448807b630f7cfac612c

  • SHA1

    49da1f30f234afb15a8bf05c742aab609553456f

  • SHA256

    df6c7f45c97ef6a35a4d6e8790aedfc64fa198e5db4529612efa946ebf201531

  • SHA512

    912ce7495e6a47711791d6ff93220fced3d0a62232dee4481d8ceb56342ddd50dfe08aa30639d3644b994e451a3851753ea87a875969a2475998659223d145d8

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz4kmmIPTH:bc/y2lkF0+BjjIIbH

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_5147f664a5a6448807b630f7cfac612c_cryptolocker

    • Size

      44KB

    • MD5

      5147f664a5a6448807b630f7cfac612c

    • SHA1

      49da1f30f234afb15a8bf05c742aab609553456f

    • SHA256

      df6c7f45c97ef6a35a4d6e8790aedfc64fa198e5db4529612efa946ebf201531

    • SHA512

      912ce7495e6a47711791d6ff93220fced3d0a62232dee4481d8ceb56342ddd50dfe08aa30639d3644b994e451a3851753ea87a875969a2475998659223d145d8

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz4kmmIPTH:bc/y2lkF0+BjjIIbH

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks