General

  • Target

    2024-04-16_2f530790d62796847595233043b08335_cryptolocker

  • Size

    81KB

  • Sample

    240416-rvffgacc78

  • MD5

    2f530790d62796847595233043b08335

  • SHA1

    95d00c35b261d829346f2314c3bdef99ca8c3f74

  • SHA256

    c2c01aa3ef601b57af33df7c3c17c74443f7f7328d4080501b8407e5ff93cb8e

  • SHA512

    84fba3c37d299d7d74965a1cb1384941eb0d29f25a1945d4e7f91f74727303cde030e022474fa3ae4cbde3b22ee194a03bb3883b8ffdb0790a0d10688666d1fa

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVa:vCjsIOtEvwDpj5H9YvQd2l

Score
10/10

Malware Config

Targets

    • Target

      2024-04-16_2f530790d62796847595233043b08335_cryptolocker

    • Size

      81KB

    • MD5

      2f530790d62796847595233043b08335

    • SHA1

      95d00c35b261d829346f2314c3bdef99ca8c3f74

    • SHA256

      c2c01aa3ef601b57af33df7c3c17c74443f7f7328d4080501b8407e5ff93cb8e

    • SHA512

      84fba3c37d299d7d74965a1cb1384941eb0d29f25a1945d4e7f91f74727303cde030e022474fa3ae4cbde3b22ee194a03bb3883b8ffdb0790a0d10688666d1fa

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVa:vCjsIOtEvwDpj5H9YvQd2l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks