General

  • Target

    2024-03-29_befc050008171770b1e95d0afe7f14f6_cryptolocker

  • Size

    35KB

  • Sample

    240329-a8trksdb2v

  • MD5

    befc050008171770b1e95d0afe7f14f6

  • SHA1

    1a1c2df5720aafb325344534a3dea6b128edc206

  • SHA256

    7fac4b9c14cbde8cb47462b30fd564f086c45c523e79280ce0c02eca0a71c0d0

  • SHA512

    fa308655378932c4427b65e3c143935216320f09e86f8e6fe08f183057cd5646d635a9158ca4793982bf15134e4c581a5a6e9d7d9dcef77bb99aebd6291d0498

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4JQ4:fT+hsMQMOtEvwDpjoIHJQ4

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_befc050008171770b1e95d0afe7f14f6_cryptolocker

    • Size

      35KB

    • MD5

      befc050008171770b1e95d0afe7f14f6

    • SHA1

      1a1c2df5720aafb325344534a3dea6b128edc206

    • SHA256

      7fac4b9c14cbde8cb47462b30fd564f086c45c523e79280ce0c02eca0a71c0d0

    • SHA512

      fa308655378932c4427b65e3c143935216320f09e86f8e6fe08f183057cd5646d635a9158ca4793982bf15134e4c581a5a6e9d7d9dcef77bb99aebd6291d0498

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4JQ4:fT+hsMQMOtEvwDpjoIHJQ4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks