General

  • Target

    2024-04-08_3a73ab6bd75052b29da6e9f88c4f12b3_cryptolocker

  • Size

    125KB

  • Sample

    240409-t1y6wacd58

  • MD5

    3a73ab6bd75052b29da6e9f88c4f12b3

  • SHA1

    20365c49eb31cf1a88ca9767eddef35dbd507490

  • SHA256

    ba5c85976124ca22d81130772272c99c01f762126a983cb30f9249205804ad75

  • SHA512

    540d589549a05fd95b863b973522195c4599822c10d1465145336eb29917f16c4ea4a0b91e6ecce1a938b8a27dea476fe14f8d8b82284aaeffdff359310cc530

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxE4q8:vCA9OtEvwDpjK

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_3a73ab6bd75052b29da6e9f88c4f12b3_cryptolocker

    • Size

      125KB

    • MD5

      3a73ab6bd75052b29da6e9f88c4f12b3

    • SHA1

      20365c49eb31cf1a88ca9767eddef35dbd507490

    • SHA256

      ba5c85976124ca22d81130772272c99c01f762126a983cb30f9249205804ad75

    • SHA512

      540d589549a05fd95b863b973522195c4599822c10d1465145336eb29917f16c4ea4a0b91e6ecce1a938b8a27dea476fe14f8d8b82284aaeffdff359310cc530

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxE4q8:vCA9OtEvwDpjK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks