General

  • Target

    2024-04-05_d998e1447d7f978c9587f3e86daeaf2e_cryptolocker

  • Size

    44KB

  • Sample

    240405-bw94gagd8v

  • MD5

    d998e1447d7f978c9587f3e86daeaf2e

  • SHA1

    76ff0ef0ea5d47905c8834b74e73a7ef7c2f2806

  • SHA256

    f4df97f0b5e50abb332f9555b47302afd147ce28c90ddf898d51a43156815bdc

  • SHA512

    0d9eb22ec4be3af1d1b113989980782d32a2ac88589cf834c7fe062cf6e613f10873ec43d6f6117090e953bf3974cac89deee240e8a048849d181f5722793e24

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNSDN:bgGYcA/53GADw8Cl/L

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_d998e1447d7f978c9587f3e86daeaf2e_cryptolocker

    • Size

      44KB

    • MD5

      d998e1447d7f978c9587f3e86daeaf2e

    • SHA1

      76ff0ef0ea5d47905c8834b74e73a7ef7c2f2806

    • SHA256

      f4df97f0b5e50abb332f9555b47302afd147ce28c90ddf898d51a43156815bdc

    • SHA512

      0d9eb22ec4be3af1d1b113989980782d32a2ac88589cf834c7fe062cf6e613f10873ec43d6f6117090e953bf3974cac89deee240e8a048849d181f5722793e24

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNSDN:bgGYcA/53GADw8Cl/L

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks