General

  • Target

    2024-02-23_3eba1b078827d1add64c576c1d3380f2_cryptolocker

  • Size

    40KB

  • Sample

    240223-ljkm6aeg35

  • MD5

    3eba1b078827d1add64c576c1d3380f2

  • SHA1

    18ac2bc6117012a526ed0a17d8c105308a31c79b

  • SHA256

    21890d22d840edc11e4f21d8179ba57735f6368981996a10566108572f08a626

  • SHA512

    00946dcd71abeeb1879c1dc60bbc529428aebc4c351a95b3f0ac46f21dd21c8b4654e09f3c6b1aeba9a0e3399bbfb06837cd69d64982e58d19610d30276e729a

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA4Dq:b/pYayGig5HjS3NPAuq

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_3eba1b078827d1add64c576c1d3380f2_cryptolocker

    • Size

      40KB

    • MD5

      3eba1b078827d1add64c576c1d3380f2

    • SHA1

      18ac2bc6117012a526ed0a17d8c105308a31c79b

    • SHA256

      21890d22d840edc11e4f21d8179ba57735f6368981996a10566108572f08a626

    • SHA512

      00946dcd71abeeb1879c1dc60bbc529428aebc4c351a95b3f0ac46f21dd21c8b4654e09f3c6b1aeba9a0e3399bbfb06837cd69d64982e58d19610d30276e729a

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA4Dq:b/pYayGig5HjS3NPAuq

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks