General

  • Target

    2024-04-17_f29cbc682746b4e80bbb4cbdc01c5abb_cryptolocker

  • Size

    94KB

  • Sample

    240417-c8h17adb41

  • MD5

    f29cbc682746b4e80bbb4cbdc01c5abb

  • SHA1

    ca5ac573ac3ae757537a460fccbb584f44f2ba05

  • SHA256

    cfa9c110d0827f529c3e10f13259e8d298f22273ec32e4c67e82fa2ed8cf3a3f

  • SHA512

    64c92bc63c5e8662c09089ae08e338ea945733736b37ff67268b212edff2f4899bd3fbbc0ff420b674d6a7b1db82135f0943ba3f8bd3a3609dba1f6bd4dbf058

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgi:V6a+pOtEvwDpjtzm

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_f29cbc682746b4e80bbb4cbdc01c5abb_cryptolocker

    • Size

      94KB

    • MD5

      f29cbc682746b4e80bbb4cbdc01c5abb

    • SHA1

      ca5ac573ac3ae757537a460fccbb584f44f2ba05

    • SHA256

      cfa9c110d0827f529c3e10f13259e8d298f22273ec32e4c67e82fa2ed8cf3a3f

    • SHA512

      64c92bc63c5e8662c09089ae08e338ea945733736b37ff67268b212edff2f4899bd3fbbc0ff420b674d6a7b1db82135f0943ba3f8bd3a3609dba1f6bd4dbf058

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgi:V6a+pOtEvwDpjtzm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks