General

  • Target

    2024-02-22_0d82496da578cf8f8830e4f7139b84f7_cryptolocker

  • Size

    36KB

  • Sample

    240222-lfl2tafg64

  • MD5

    0d82496da578cf8f8830e4f7139b84f7

  • SHA1

    3efad2e4692f674dd687d5a518877907311fab4f

  • SHA256

    cd58713ae51f7f4e8797028e01656472b879453fbff12de05ce14c94515ffda2

  • SHA512

    70d6c0c99f6de38f9b0550ee2355b87524e132213fe8ef9db9fa9f11203f4a54826b98b754d481382820f1764a117087320550e12723d709a1524c38d0e7c319

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRY0:vj+jsMQMOtEvwDpj5HcSY0

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_0d82496da578cf8f8830e4f7139b84f7_cryptolocker

    • Size

      36KB

    • MD5

      0d82496da578cf8f8830e4f7139b84f7

    • SHA1

      3efad2e4692f674dd687d5a518877907311fab4f

    • SHA256

      cd58713ae51f7f4e8797028e01656472b879453fbff12de05ce14c94515ffda2

    • SHA512

      70d6c0c99f6de38f9b0550ee2355b87524e132213fe8ef9db9fa9f11203f4a54826b98b754d481382820f1764a117087320550e12723d709a1524c38d0e7c319

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRY0:vj+jsMQMOtEvwDpj5HcSY0

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks