Resubmissions

02-03-2024 10:40

240302-mqlpgacg78 8

02-03-2024 10:39

240302-mqeadsce4x 7

28-02-2024 13:46

240228-q2y1qada45 7

28-02-2024 13:43

240228-q1dcmada3t 10

General

  • Target

    2024-02-28_980b400e3c06fa3cad859ba2d3a24e0c_cryptolocker

  • Size

    56KB

  • Sample

    240228-q1dcmada3t

  • MD5

    980b400e3c06fa3cad859ba2d3a24e0c

  • SHA1

    19d6eae13cf724a1411f6bba2ea8fbd8d3664c35

  • SHA256

    b3a511876e3ac955d2e1a7304230d168f77f67aab06f0789b19fd359a852862d

  • SHA512

    c7702665757fdbaef0df8a927f43a7d5951924b8c0b382315c9eafaf0c25cf4bb9db09fa3b079820d706f1288d97cc914e4c91f546173fec5844b230cfe66bc5

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61/T:BbdDmjr+OtEvwDpjMN

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_980b400e3c06fa3cad859ba2d3a24e0c_cryptolocker

    • Size

      56KB

    • MD5

      980b400e3c06fa3cad859ba2d3a24e0c

    • SHA1

      19d6eae13cf724a1411f6bba2ea8fbd8d3664c35

    • SHA256

      b3a511876e3ac955d2e1a7304230d168f77f67aab06f0789b19fd359a852862d

    • SHA512

      c7702665757fdbaef0df8a927f43a7d5951924b8c0b382315c9eafaf0c25cf4bb9db09fa3b079820d706f1288d97cc914e4c91f546173fec5844b230cfe66bc5

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61/T:BbdDmjr+OtEvwDpjMN

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks