General

  • Target

    2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker

  • Size

    35KB

  • Sample

    240316-enybgsdc67

  • MD5

    0ebe84b641b929c72386d3545fb8af36

  • SHA1

    6c5c53d711d60835b03f7d0405f3efbf9044bf94

  • SHA256

    c5fb33b322e22f7fcf2ccb7b38e9f8031f6c852841673e656c6465d56ae12ca7

  • SHA512

    3e625394a9b9cf137c2d8f8e7528d143c920a9758902d32c60c9377f9c61a22aebad959b3369dd553ee1139ee68d0b53a5dbc76ba3e6dc66a1e5be6e56397d6e

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVWb:bA74zYcgT/Ekd0ryfjPIunYwcb

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker

    • Size

      35KB

    • MD5

      0ebe84b641b929c72386d3545fb8af36

    • SHA1

      6c5c53d711d60835b03f7d0405f3efbf9044bf94

    • SHA256

      c5fb33b322e22f7fcf2ccb7b38e9f8031f6c852841673e656c6465d56ae12ca7

    • SHA512

      3e625394a9b9cf137c2d8f8e7528d143c920a9758902d32c60c9377f9c61a22aebad959b3369dd553ee1139ee68d0b53a5dbc76ba3e6dc66a1e5be6e56397d6e

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVWb:bA74zYcgT/Ekd0ryfjPIunYwcb

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks