General

  • Target

    2024-03-08_a27ace488ddab7226eb8a0bcf02e7ca5_cryptolocker

  • Size

    47KB

  • Sample

    240308-gvcdpshh51

  • MD5

    a27ace488ddab7226eb8a0bcf02e7ca5

  • SHA1

    64362b164112d0b46dd2af81638de6a270b1f71f

  • SHA256

    494417532d4589ae2240012d27c42b852dafee151306d95fce089fd8736b3637

  • SHA512

    f2c2a90663ab5fce935f85585a391f63ba9f656fb83d67fdc1a2955acd1befbf67222985d2ee6391429fac4e565e7d07e5f9f67a53fd29124d01fb53af9a9c44

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mo2pv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQm

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_a27ace488ddab7226eb8a0bcf02e7ca5_cryptolocker

    • Size

      47KB

    • MD5

      a27ace488ddab7226eb8a0bcf02e7ca5

    • SHA1

      64362b164112d0b46dd2af81638de6a270b1f71f

    • SHA256

      494417532d4589ae2240012d27c42b852dafee151306d95fce089fd8736b3637

    • SHA512

      f2c2a90663ab5fce935f85585a391f63ba9f656fb83d67fdc1a2955acd1befbf67222985d2ee6391429fac4e565e7d07e5f9f67a53fd29124d01fb53af9a9c44

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mo2pv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks