General

  • Target

    2024-03-08_8a8b9db157792e0174454b272e3f865e_cryptolocker

  • Size

    95KB

  • Sample

    240308-mwlawsdb66

  • MD5

    8a8b9db157792e0174454b272e3f865e

  • SHA1

    cb6411ab7391708610b66adc56a30f1ada0991e9

  • SHA256

    de81f3015eab76aa15afbc4b4d0c3894ee694fa194e988ae8d712d430c1249be

  • SHA512

    e0fb427008caeb6e45982fc2384ea4313973fa93cce8b269185a0c212525b61e291e0c5f0f847f58b4a4f1f5682fd948303fad9f5343db80c055d383d49f2c90

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwf:V6a+pOtEvwDpjtzz

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_8a8b9db157792e0174454b272e3f865e_cryptolocker

    • Size

      95KB

    • MD5

      8a8b9db157792e0174454b272e3f865e

    • SHA1

      cb6411ab7391708610b66adc56a30f1ada0991e9

    • SHA256

      de81f3015eab76aa15afbc4b4d0c3894ee694fa194e988ae8d712d430c1249be

    • SHA512

      e0fb427008caeb6e45982fc2384ea4313973fa93cce8b269185a0c212525b61e291e0c5f0f847f58b4a4f1f5682fd948303fad9f5343db80c055d383d49f2c90

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwf:V6a+pOtEvwDpjtzz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks