General

  • Target

    2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker

  • Size

    34KB

  • Sample

    240326-t2nrjahc91

  • MD5

    437d017041692f428b361290cac9e8d3

  • SHA1

    89e8551c62523cb4c28e7d77d12cd2a0b2f08ce7

  • SHA256

    129b4dcfcd11db17ad7c2ce9b3bc6cbf88d6eb62b768ae038b88b5db2c887842

  • SHA512

    a9cdb75f96a8c3e432acc98c22c463dc094b9c02e9fe185cf0889fd566453d894323721c7ddb798fb99c6a01026d63b13ac58f35ab4eca90e5fec0dbc3abb4a2

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+45FK:fT+hsMQMOtEvwDpjoIH50

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker

    • Size

      34KB

    • MD5

      437d017041692f428b361290cac9e8d3

    • SHA1

      89e8551c62523cb4c28e7d77d12cd2a0b2f08ce7

    • SHA256

      129b4dcfcd11db17ad7c2ce9b3bc6cbf88d6eb62b768ae038b88b5db2c887842

    • SHA512

      a9cdb75f96a8c3e432acc98c22c463dc094b9c02e9fe185cf0889fd566453d894323721c7ddb798fb99c6a01026d63b13ac58f35ab4eca90e5fec0dbc3abb4a2

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+45FK:fT+hsMQMOtEvwDpjoIH50

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks