General

  • Target

    2024-04-10_d8454743417cfff9fcbf136c3b6e3802_cryptolocker

  • Size

    35KB

  • Sample

    240410-ejr9nsgb7s

  • MD5

    d8454743417cfff9fcbf136c3b6e3802

  • SHA1

    9077b506652382f4c824a73ec872d890db9e70d4

  • SHA256

    5c16ba3977e772a3bad32de82e156c75973911826f2a143022bd5518dfea0ee3

  • SHA512

    13cdd4524b33f91303b87f0d39a515d0937cae5f0d190eeebebd9a40e18c2cf3eded3f460530ff67d39bfb24f7374fccd1204d3a8c2dcf8a6888645479c47eeb

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4L:fT+hsMQMOtEvwDpjoIHL

Score
10/10

Malware Config

Targets

    • Target

      2024-04-10_d8454743417cfff9fcbf136c3b6e3802_cryptolocker

    • Size

      35KB

    • MD5

      d8454743417cfff9fcbf136c3b6e3802

    • SHA1

      9077b506652382f4c824a73ec872d890db9e70d4

    • SHA256

      5c16ba3977e772a3bad32de82e156c75973911826f2a143022bd5518dfea0ee3

    • SHA512

      13cdd4524b33f91303b87f0d39a515d0937cae5f0d190eeebebd9a40e18c2cf3eded3f460530ff67d39bfb24f7374fccd1204d3a8c2dcf8a6888645479c47eeb

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4L:fT+hsMQMOtEvwDpjoIHL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks