General

  • Target

    2024-04-15_828063922397eb27d0a3f97712a77958_cryptolocker

  • Size

    69KB

  • Sample

    240415-gva6msgd29

  • MD5

    828063922397eb27d0a3f97712a77958

  • SHA1

    e4bce1c949578094979514be8478ddea7c2223fb

  • SHA256

    d60d9a92ec024f064d484609d73fc81a2b39186aaa24646130b0e4699d34f3c7

  • SHA512

    64918f1791f3fa80fbb7054e107df073ea5446d4660e2d873483567e4018d5c57f8e33b8f7ccd8de44d115c66bc9e04fc1167c9a0669384a3a9daac8b43e4ad6

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50U:DW60sllyWOtEvwDpjwF85n

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_828063922397eb27d0a3f97712a77958_cryptolocker

    • Size

      69KB

    • MD5

      828063922397eb27d0a3f97712a77958

    • SHA1

      e4bce1c949578094979514be8478ddea7c2223fb

    • SHA256

      d60d9a92ec024f064d484609d73fc81a2b39186aaa24646130b0e4699d34f3c7

    • SHA512

      64918f1791f3fa80fbb7054e107df073ea5446d4660e2d873483567e4018d5c57f8e33b8f7ccd8de44d115c66bc9e04fc1167c9a0669384a3a9daac8b43e4ad6

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50U:DW60sllyWOtEvwDpjwF85n

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks