General

  • Target

    2024-04-11_de7bd72d702a4a8dbd2b9836a129258e_cryptolocker

  • Size

    34KB

  • Sample

    240411-jraf2sac3y

  • MD5

    de7bd72d702a4a8dbd2b9836a129258e

  • SHA1

    5dff0ed85da349347ac4d96bc5310294a6d77edc

  • SHA256

    de3d327a33a609c8cf861afab6568240ef32570a1bf25f8989feec21e12f8ad6

  • SHA512

    bb66666b94c24b85f1856a07b364905e10df770627872e6c4950bc581140b9c3a71c5a9ad56bf3e01236d41d5f56d6e546a38ebc6ff23d759be737499c8e2267

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4A:fT+hsMQMOtEvwDpjoIHA

Score
10/10

Malware Config

Targets

    • Target

      2024-04-11_de7bd72d702a4a8dbd2b9836a129258e_cryptolocker

    • Size

      34KB

    • MD5

      de7bd72d702a4a8dbd2b9836a129258e

    • SHA1

      5dff0ed85da349347ac4d96bc5310294a6d77edc

    • SHA256

      de3d327a33a609c8cf861afab6568240ef32570a1bf25f8989feec21e12f8ad6

    • SHA512

      bb66666b94c24b85f1856a07b364905e10df770627872e6c4950bc581140b9c3a71c5a9ad56bf3e01236d41d5f56d6e546a38ebc6ff23d759be737499c8e2267

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4A:fT+hsMQMOtEvwDpjoIHA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks