General

  • Target

    2024-02-23_c9dd1680b1b34fc5d1fb66bddfd3548b_cryptolocker

  • Size

    35KB

  • Sample

    240223-m5d8yafa91

  • MD5

    c9dd1680b1b34fc5d1fb66bddfd3548b

  • SHA1

    f0fc1c0d97cb4cc5fd49b9cb62ffc21392441090

  • SHA256

    394d1f64fce15b2667c21ea8e5997126e1128b71ee753583e86df80312e6f5ca

  • SHA512

    c3342635248eaf12902fc939098212052a3dd27f01cb78ccb9b92085cba9b0230d897067bd6248687c49a3f6022d3a6071b693ae9f1cea03feb7d7146c9c3a58

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZQYuAZF:b/yC4GyNM01GuQMNXw2PSj1POaZF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_c9dd1680b1b34fc5d1fb66bddfd3548b_cryptolocker

    • Size

      35KB

    • MD5

      c9dd1680b1b34fc5d1fb66bddfd3548b

    • SHA1

      f0fc1c0d97cb4cc5fd49b9cb62ffc21392441090

    • SHA256

      394d1f64fce15b2667c21ea8e5997126e1128b71ee753583e86df80312e6f5ca

    • SHA512

      c3342635248eaf12902fc939098212052a3dd27f01cb78ccb9b92085cba9b0230d897067bd6248687c49a3f6022d3a6071b693ae9f1cea03feb7d7146c9c3a58

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZQYuAZF:b/yC4GyNM01GuQMNXw2PSj1POaZF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks