General

  • Target

    2024-03-27_5fdc0d307303481d8ecdcaa8d02f1819_cryptolocker

  • Size

    37KB

  • Sample

    240327-ebhehaca48

  • MD5

    5fdc0d307303481d8ecdcaa8d02f1819

  • SHA1

    c8bff4729a6c3bf961bae4ea3778c41aaf2d2d4f

  • SHA256

    473b91124fce97810a4d0142f69aef52c147752925071e02f2622e8d3d306ec8

  • SHA512

    dea5a75e4fa2d43d46c3c132a6cd117aa292e3fdd9b8c1f65b542778d48b7be6248b54d2347712a185110d502a03600e9ef74f51c1bc39276aeb262bfb2fd1ec

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JE59:bxNrC7kYo1Fxf3s0659

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_5fdc0d307303481d8ecdcaa8d02f1819_cryptolocker

    • Size

      37KB

    • MD5

      5fdc0d307303481d8ecdcaa8d02f1819

    • SHA1

      c8bff4729a6c3bf961bae4ea3778c41aaf2d2d4f

    • SHA256

      473b91124fce97810a4d0142f69aef52c147752925071e02f2622e8d3d306ec8

    • SHA512

      dea5a75e4fa2d43d46c3c132a6cd117aa292e3fdd9b8c1f65b542778d48b7be6248b54d2347712a185110d502a03600e9ef74f51c1bc39276aeb262bfb2fd1ec

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JE59:bxNrC7kYo1Fxf3s0659

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks