General

  • Target

    2024-03-02_7532511aba4c8b2ac5f21dbba5ce8dba_cryptolocker

  • Size

    414KB

  • Sample

    240302-zgmxdshf85

  • MD5

    7532511aba4c8b2ac5f21dbba5ce8dba

  • SHA1

    6180500f96a03a671dcee5bdc0d9e971ff1ec249

  • SHA256

    f50f22f0996b939996e84a8d1e0ff682558c082e19f55b9f5db7bd135df617a6

  • SHA512

    240aa853b4233476137e84dabaad051336a718880e9aa37f4c262ff5d042fc3daef62bca3d87ca7f9e1da7def084ddcad152070cc6089fe3e515210b24432ef4

  • SSDEEP

    6144:EWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvC8AnRSeg:EWkEuCaNT85I2vCMX5l+ZRvfIRq

Malware Config

Targets

    • Target

      2024-03-02_7532511aba4c8b2ac5f21dbba5ce8dba_cryptolocker

    • Size

      414KB

    • MD5

      7532511aba4c8b2ac5f21dbba5ce8dba

    • SHA1

      6180500f96a03a671dcee5bdc0d9e971ff1ec249

    • SHA256

      f50f22f0996b939996e84a8d1e0ff682558c082e19f55b9f5db7bd135df617a6

    • SHA512

      240aa853b4233476137e84dabaad051336a718880e9aa37f4c262ff5d042fc3daef62bca3d87ca7f9e1da7def084ddcad152070cc6089fe3e515210b24432ef4

    • SSDEEP

      6144:EWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvC8AnRSeg:EWkEuCaNT85I2vCMX5l+ZRvfIRq

    • CryptoLocker

      Ransomware family with multiple variants.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks