General

  • Target

    2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker

  • Size

    39KB

  • Sample

    240405-h9lrcseg82

  • MD5

    1baa73fcf34359574079bdf87888d1be

  • SHA1

    609f4a52e6dee05cde6ac60224e3428ae3dbdf1c

  • SHA256

    bbb071827e9dcc4c76366158bfb47964c04d6875869bf48fe8bf217e7eec09c3

  • SHA512

    66bc253c769956515af969abf476721e2da823497c43d96bc3d56f0d1593757f507313a8de157c43278cb3f62d1e98876e8896a594f57f0db061159529f02a1c

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgye:bIDOw9a0Dwo3P1ojvUSD79yye

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker

    • Size

      39KB

    • MD5

      1baa73fcf34359574079bdf87888d1be

    • SHA1

      609f4a52e6dee05cde6ac60224e3428ae3dbdf1c

    • SHA256

      bbb071827e9dcc4c76366158bfb47964c04d6875869bf48fe8bf217e7eec09c3

    • SHA512

      66bc253c769956515af969abf476721e2da823497c43d96bc3d56f0d1593757f507313a8de157c43278cb3f62d1e98876e8896a594f57f0db061159529f02a1c

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgye:bIDOw9a0Dwo3P1ojvUSD79yye

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks