General

  • Target

    2024-04-10_ba2d20ea0f1aaec9f28181f21de286d5_cryptolocker

  • Size

    44KB

  • Sample

    240410-dejw3aff5w

  • MD5

    ba2d20ea0f1aaec9f28181f21de286d5

  • SHA1

    91f487b4fe11e053493343408eaa8146c916092a

  • SHA256

    2a4f4f465a13df0aead42584a91f8a2fcc01fa17733a524284690d886748eaac

  • SHA512

    3b6b23665a74c86f63c433016e7494c8c343f96efdf9f6b1ee2343a5a22a3fa9f4a6dccab58bc1d8bc49c3a39f890be49ef641343f57eec2dc2ae6b7999e8b08

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp1Yvb9wAs:bxNrC7kYo1Fxf3s05rwxbF7YvbS

Score
10/10

Malware Config

Targets

    • Target

      2024-04-10_ba2d20ea0f1aaec9f28181f21de286d5_cryptolocker

    • Size

      44KB

    • MD5

      ba2d20ea0f1aaec9f28181f21de286d5

    • SHA1

      91f487b4fe11e053493343408eaa8146c916092a

    • SHA256

      2a4f4f465a13df0aead42584a91f8a2fcc01fa17733a524284690d886748eaac

    • SHA512

      3b6b23665a74c86f63c433016e7494c8c343f96efdf9f6b1ee2343a5a22a3fa9f4a6dccab58bc1d8bc49c3a39f890be49ef641343f57eec2dc2ae6b7999e8b08

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp1Yvb9wAs:bxNrC7kYo1Fxf3s05rwxbF7YvbS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks