General

  • Target

    2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker

  • Size

    38KB

  • Sample

    240315-1ephwade73

  • MD5

    8a3898c8b75daecd281235340ec0904c

  • SHA1

    c7ce5ad48f8b33ae7ded6f1a52485852ce412e39

  • SHA256

    98940e3c78c5294a0ce5f40af23f5ec2f73b26d7461d9291ebef0c4e952474db

  • SHA512

    34aa4171ccd0f4749dbf5afd0fd4eb7d16e5c8ffc4242941fec5ed2d98806e5e8b44fdf90cc050aef0dc15567c4f55b8d76d08182149369acc0e6be3e0f3db41

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QxN:bAvJCYOOvbRPDEgXrNekd7l94i3pF0C

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker

    • Size

      38KB

    • MD5

      8a3898c8b75daecd281235340ec0904c

    • SHA1

      c7ce5ad48f8b33ae7ded6f1a52485852ce412e39

    • SHA256

      98940e3c78c5294a0ce5f40af23f5ec2f73b26d7461d9291ebef0c4e952474db

    • SHA512

      34aa4171ccd0f4749dbf5afd0fd4eb7d16e5c8ffc4242941fec5ed2d98806e5e8b44fdf90cc050aef0dc15567c4f55b8d76d08182149369acc0e6be3e0f3db41

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QxN:bAvJCYOOvbRPDEgXrNekd7l94i3pF0C

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks