General

  • Target

    2024-02-22_db97cd7047b1eecdecbe8eba588056de_cryptolocker

  • Size

    64KB

  • Sample

    240222-l5vp9afe9t

  • MD5

    db97cd7047b1eecdecbe8eba588056de

  • SHA1

    bf785727f77de1763e88522f46a52abe4d5a5ea1

  • SHA256

    60587a9befd9f961f1303dd4422d861c0d7ab92de31aea1e53d1c85c206ac1d9

  • SHA512

    96ac9e4a997401e665f36e147445b7f97a6c0ef1abca3279275efdeb50fb6061ccda474d7cdd6a929c755c0da87d44dff2626a16e70302c9ec2962369d3b0432

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1knzhwJ:vCjsIOtEvwDpj5Hv04

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_db97cd7047b1eecdecbe8eba588056de_cryptolocker

    • Size

      64KB

    • MD5

      db97cd7047b1eecdecbe8eba588056de

    • SHA1

      bf785727f77de1763e88522f46a52abe4d5a5ea1

    • SHA256

      60587a9befd9f961f1303dd4422d861c0d7ab92de31aea1e53d1c85c206ac1d9

    • SHA512

      96ac9e4a997401e665f36e147445b7f97a6c0ef1abca3279275efdeb50fb6061ccda474d7cdd6a929c755c0da87d44dff2626a16e70302c9ec2962369d3b0432

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1knzhwJ:vCjsIOtEvwDpj5Hv04

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks