General

  • Target

    2024-02-21_2140ab81891fa3d1743134b2ce0f4c5c_cryptolocker

  • Size

    98KB

  • Sample

    240221-qqknysge52

  • MD5

    2140ab81891fa3d1743134b2ce0f4c5c

  • SHA1

    cac88d21a9bd022c3d3bb6f7b37e491ac8171301

  • SHA256

    e5205f4e0a86b4f25ee0a8f96c1d10337d819f06b9b2952719be7a578b219ac2

  • SHA512

    8ab650f99c9830d66220e033dedd98e1a44247e41f99970943c481b3048f3134891f89a59a158df452954b9ceafcfd4f93762d4a22a09910df7fd4e02bd3e58c

  • SSDEEP

    1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwAK:26a+2OtEvwDpjtz+

Score
10/10

Malware Config

Targets

    • Target

      2024-02-21_2140ab81891fa3d1743134b2ce0f4c5c_cryptolocker

    • Size

      98KB

    • MD5

      2140ab81891fa3d1743134b2ce0f4c5c

    • SHA1

      cac88d21a9bd022c3d3bb6f7b37e491ac8171301

    • SHA256

      e5205f4e0a86b4f25ee0a8f96c1d10337d819f06b9b2952719be7a578b219ac2

    • SHA512

      8ab650f99c9830d66220e033dedd98e1a44247e41f99970943c481b3048f3134891f89a59a158df452954b9ceafcfd4f93762d4a22a09910df7fd4e02bd3e58c

    • SSDEEP

      1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwAK:26a+2OtEvwDpjtz+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks