General

  • Target

    2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker

  • Size

    37KB

  • Sample

    240325-3l2swsag83

  • MD5

    db6ce5ab88dcdbd3fdfc4a513abbe707

  • SHA1

    c43920a435916113b592c0f13f7f476f20dc6aff

  • SHA256

    b18510f6d6bfacfd67cdbc2b63ec59792be8c8755856649a5f0bc0d4d1f440c6

  • SHA512

    ff9b2f720c08a1932a73c2344705dbbf431aa4f4efb9185b703d29307febdacfea049c11cb8fe241563fe181e68fa0638d488db77957789ed16e31b0c671924f

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenU7:ZzFbxmLPWQMOtEvwDpjLeG

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker

    • Size

      37KB

    • MD5

      db6ce5ab88dcdbd3fdfc4a513abbe707

    • SHA1

      c43920a435916113b592c0f13f7f476f20dc6aff

    • SHA256

      b18510f6d6bfacfd67cdbc2b63ec59792be8c8755856649a5f0bc0d4d1f440c6

    • SHA512

      ff9b2f720c08a1932a73c2344705dbbf431aa4f4efb9185b703d29307febdacfea049c11cb8fe241563fe181e68fa0638d488db77957789ed16e31b0c671924f

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenU7:ZzFbxmLPWQMOtEvwDpjLeG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks