General

  • Target

    2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker

  • Size

    37KB

  • Sample

    240315-a7538acd5x

  • MD5

    dbf277ec2718dcff1efcddabb76faba6

  • SHA1

    bac1d1f1546a4dd6417dd833e996a8debea42674

  • SHA256

    58c0776d8d2a0658555203957c148008cabb14c8c75febd76ed2a2e7126108ff

  • SHA512

    9e931d0ea033060b4669177b30d97b6d86b5d80adcb4ef4e88497f9c77a55a48e97c58fa76703ed73ad1f26e944e06c72db04cee6a230284a35a70ad7f15199f

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAYMj:ZzFbxmLPWQMOtEvwDpjLeJAYMj

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker

    • Size

      37KB

    • MD5

      dbf277ec2718dcff1efcddabb76faba6

    • SHA1

      bac1d1f1546a4dd6417dd833e996a8debea42674

    • SHA256

      58c0776d8d2a0658555203957c148008cabb14c8c75febd76ed2a2e7126108ff

    • SHA512

      9e931d0ea033060b4669177b30d97b6d86b5d80adcb4ef4e88497f9c77a55a48e97c58fa76703ed73ad1f26e944e06c72db04cee6a230284a35a70ad7f15199f

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAYMj:ZzFbxmLPWQMOtEvwDpjLeJAYMj

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks