General

  • Target

    2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker

  • Size

    55KB

  • Sample

    240316-fgqthacd41

  • MD5

    94649797d19bff4393586995409e3bb1

  • SHA1

    2ff36231774ad99ba69594b67356ef07405c0130

  • SHA256

    b87e0dcbcc61d43b13df33caff9c1159c1a78e27aa4b03aa5a123290916c6dbc

  • SHA512

    a7cff6bf8d8bcf198eb3d13f9b905bba617a17d2961dac6ab99d62e11247dabcc324d833fd1e2a1599a73602706e9c2797abb92238dcc4bfe4ce94a204df1e82

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcmr:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkg

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker

    • Size

      55KB

    • MD5

      94649797d19bff4393586995409e3bb1

    • SHA1

      2ff36231774ad99ba69594b67356ef07405c0130

    • SHA256

      b87e0dcbcc61d43b13df33caff9c1159c1a78e27aa4b03aa5a123290916c6dbc

    • SHA512

      a7cff6bf8d8bcf198eb3d13f9b905bba617a17d2961dac6ab99d62e11247dabcc324d833fd1e2a1599a73602706e9c2797abb92238dcc4bfe4ce94a204df1e82

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcmr:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks