General

  • Target

    2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker

  • Size

    43KB

  • Sample

    240327-dzcy9aef2s

  • MD5

    09608ccfd15b8c7e71204b441e4ec459

  • SHA1

    d61a213223064383d857fc119d6e9e96c800d989

  • SHA256

    e4414c4a0f84283b4ce2e85b6e7485ee68f38eb6308068bd4c31471930a64b5a

  • SHA512

    4fe08aaebfb6c70d6458917fe28cb843fe9056e2b4407633886926bbeff1eeaf24e4c775d5eff92d36d482b317339dd6f70fc374d19a7ed4e31034a58c50cde9

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuj5:bc/y2lkF0+Bjrdut

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker

    • Size

      43KB

    • MD5

      09608ccfd15b8c7e71204b441e4ec459

    • SHA1

      d61a213223064383d857fc119d6e9e96c800d989

    • SHA256

      e4414c4a0f84283b4ce2e85b6e7485ee68f38eb6308068bd4c31471930a64b5a

    • SHA512

      4fe08aaebfb6c70d6458917fe28cb843fe9056e2b4407633886926bbeff1eeaf24e4c775d5eff92d36d482b317339dd6f70fc374d19a7ed4e31034a58c50cde9

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuj5:bc/y2lkF0+Bjrdut

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks