General

  • Target

    2024-02-22_c3196e85b4904f02bef41baa3b0b7543_cryptolocker

  • Size

    59KB

  • Sample

    240222-t69vkace8x

  • MD5

    c3196e85b4904f02bef41baa3b0b7543

  • SHA1

    cc5367ede1bce6afcee02474780e71e99240d91a

  • SHA256

    99a8b338092c5706747771fa2b7b6d98017f6ddbd5d262b841b8e505014954f5

  • SHA512

    571b0994f7f864e5e504d1415a4d9239f7b058a90ce4203e08f5028c7dff1bd08240dc794adf8b6f3c9e27ed50201d754b7e19efbf10c9e4d1827b9cffb1fd0c

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614S:BbdDmjr+OtEvwDpjMF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_c3196e85b4904f02bef41baa3b0b7543_cryptolocker

    • Size

      59KB

    • MD5

      c3196e85b4904f02bef41baa3b0b7543

    • SHA1

      cc5367ede1bce6afcee02474780e71e99240d91a

    • SHA256

      99a8b338092c5706747771fa2b7b6d98017f6ddbd5d262b841b8e505014954f5

    • SHA512

      571b0994f7f864e5e504d1415a4d9239f7b058a90ce4203e08f5028c7dff1bd08240dc794adf8b6f3c9e27ed50201d754b7e19efbf10c9e4d1827b9cffb1fd0c

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614S:BbdDmjr+OtEvwDpjMF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks