General

  • Target

    2024-04-11_f6665bcb4def12b9c24094998acacf07_cryptolocker

  • Size

    126KB

  • Sample

    240411-gftpfagf4w

  • MD5

    f6665bcb4def12b9c24094998acacf07

  • SHA1

    1e62adec46e6e9c4bc7f06574cc41ce94db34afa

  • SHA256

    d17aa057b87a6957540d19e1f0683e84d941809b28f136ed9964e3e14ae1898d

  • SHA512

    a3ae0af93357e4d8153ccba6af1a215d6755f11c1e4424ec6b4ad530f150cb9f5cf25ab62585afb83f555b913d627691f7052f47791379cff207d3f40a9a0494

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpn:vCA9OtEvwDpjr

Score
10/10

Malware Config

Targets

    • Target

      2024-04-11_f6665bcb4def12b9c24094998acacf07_cryptolocker

    • Size

      126KB

    • MD5

      f6665bcb4def12b9c24094998acacf07

    • SHA1

      1e62adec46e6e9c4bc7f06574cc41ce94db34afa

    • SHA256

      d17aa057b87a6957540d19e1f0683e84d941809b28f136ed9964e3e14ae1898d

    • SHA512

      a3ae0af93357e4d8153ccba6af1a215d6755f11c1e4424ec6b4ad530f150cb9f5cf25ab62585afb83f555b913d627691f7052f47791379cff207d3f40a9a0494

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpn:vCA9OtEvwDpjr

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks