General

  • Target

    2024-04-08_015a3f66b5b57968904503a93d6a0e79_cryptolocker

  • Size

    44KB

  • Sample

    240409-r14egsda6t

  • MD5

    015a3f66b5b57968904503a93d6a0e79

  • SHA1

    56a6bcc4d562640af92cac92e28e7b00ad9dc48a

  • SHA256

    b684fe650c180b687f195675a458cbf65ea804231140ed9c09bc9332b287f7d5

  • SHA512

    94fa6fe504d468c0570e883d369e5397a2bc282c5e51ca50ac67766d1866cf3babc6db7ba66603020cbf50c0aab2960fd94b8ccef55f077581b77a94ce55542d

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAI:bgGYcA/53GADw8Cl/HI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_015a3f66b5b57968904503a93d6a0e79_cryptolocker

    • Size

      44KB

    • MD5

      015a3f66b5b57968904503a93d6a0e79

    • SHA1

      56a6bcc4d562640af92cac92e28e7b00ad9dc48a

    • SHA256

      b684fe650c180b687f195675a458cbf65ea804231140ed9c09bc9332b287f7d5

    • SHA512

      94fa6fe504d468c0570e883d369e5397a2bc282c5e51ca50ac67766d1866cf3babc6db7ba66603020cbf50c0aab2960fd94b8ccef55f077581b77a94ce55542d

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAI:bgGYcA/53GADw8Cl/HI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks