General

  • Target

    2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker

  • Size

    39KB

  • Sample

    240306-q5kx9sdd37

  • MD5

    ec24f3dc73e4dc0c70eb967700b789c6

  • SHA1

    31993f70f356473a1600fd6b08606ed3cf83dd31

  • SHA256

    8f3dc4b28902f31a6c11e48dc36d74c74194382e17d3800a2c2d74f606f9d5b5

  • SHA512

    7d417c9c1ef51aabefe4b311736a0f5f349b8c99953b8887728ec6e46b95aae6c74dc0edb8f54b48439f0e605e6bc3a7a898b5e18970ed3b9b1c8f22c0eb7218

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QX5:bAvJCYOOvbRPDEgXrNekd7l94i3pF0o5

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker

    • Size

      39KB

    • MD5

      ec24f3dc73e4dc0c70eb967700b789c6

    • SHA1

      31993f70f356473a1600fd6b08606ed3cf83dd31

    • SHA256

      8f3dc4b28902f31a6c11e48dc36d74c74194382e17d3800a2c2d74f606f9d5b5

    • SHA512

      7d417c9c1ef51aabefe4b311736a0f5f349b8c99953b8887728ec6e46b95aae6c74dc0edb8f54b48439f0e605e6bc3a7a898b5e18970ed3b9b1c8f22c0eb7218

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QX5:bAvJCYOOvbRPDEgXrNekd7l94i3pF0o5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks