General

  • Target

    2024-04-06_6acf628a0f36a6c02c2e0ac81685183a_cryptolocker

  • Size

    66KB

  • Sample

    240406-f8qmtace55

  • MD5

    6acf628a0f36a6c02c2e0ac81685183a

  • SHA1

    dcdbe56894281c66268309046c04b9055e90d818

  • SHA256

    bd16d914b86847d7f58f3e0e0bd00f2a9d58cfadb32ee80529fe23868946291c

  • SHA512

    67ceb2806d5a8ee19e5f5a6f484a1541dd378553504ef9b91d69d7d3ecf04a19c22c9e2c41f1f30c7558c37139ca14a4564b46791393ae87ad7014870652e953

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xDQxc:6j+1NMOtEvwDpjr8ox8UDEpN/Gm

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_6acf628a0f36a6c02c2e0ac81685183a_cryptolocker

    • Size

      66KB

    • MD5

      6acf628a0f36a6c02c2e0ac81685183a

    • SHA1

      dcdbe56894281c66268309046c04b9055e90d818

    • SHA256

      bd16d914b86847d7f58f3e0e0bd00f2a9d58cfadb32ee80529fe23868946291c

    • SHA512

      67ceb2806d5a8ee19e5f5a6f484a1541dd378553504ef9b91d69d7d3ecf04a19c22c9e2c41f1f30c7558c37139ca14a4564b46791393ae87ad7014870652e953

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xDQxc:6j+1NMOtEvwDpjr8ox8UDEpN/Gm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks