General

  • Target

    2024-03-26_edf744754e09be6096f7df5b56486022_cryptolocker

  • Size

    77KB

  • Sample

    240326-rx7mqscc97

  • MD5

    edf744754e09be6096f7df5b56486022

  • SHA1

    9efdfe4e17b8472a4b7b177bf0901dd99f52f7a3

  • SHA256

    8b831ab71d2d950e465e5943ae8ed4390dbce866e2344b70e373d98e78b59cbd

  • SHA512

    5652772657976bcddc78dd818edde28bf7221a098c8d5d3d4199ef83e9042f93a145fa2311dd77014c9de0101ffcbe42fb875bd5297dab8e8a8ba5a089cbddc5

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf6:vCjsIOtEvwDpj5H9YvQd2G

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_edf744754e09be6096f7df5b56486022_cryptolocker

    • Size

      77KB

    • MD5

      edf744754e09be6096f7df5b56486022

    • SHA1

      9efdfe4e17b8472a4b7b177bf0901dd99f52f7a3

    • SHA256

      8b831ab71d2d950e465e5943ae8ed4390dbce866e2344b70e373d98e78b59cbd

    • SHA512

      5652772657976bcddc78dd818edde28bf7221a098c8d5d3d4199ef83e9042f93a145fa2311dd77014c9de0101ffcbe42fb875bd5297dab8e8a8ba5a089cbddc5

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf6:vCjsIOtEvwDpj5H9YvQd2G

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks