General

  • Target

    2024-04-17_b0fd64935be4897b6b383b7083e5c668_cryptolocker

  • Size

    40KB

  • Sample

    240417-en76padc62

  • MD5

    b0fd64935be4897b6b383b7083e5c668

  • SHA1

    0ce8d0db10d3b54aaef29f6fb2e2503ad14ff2e6

  • SHA256

    aa02de71698402b13698de3585f7ea4efd6f11fea5e5952cc73371e34f0dd71e

  • SHA512

    991611c776da6cd2da10b9863ec64b0d588a2ce0cf66f5dd7c3b9249053c291b729fcf6d79d1c0a4f309f8c617c1616a7af7ee6ef04d2de6327b6ea780ca322c

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrM:X6QFElP6n+gJQMOtEvwDpjBsYK6rM

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_b0fd64935be4897b6b383b7083e5c668_cryptolocker

    • Size

      40KB

    • MD5

      b0fd64935be4897b6b383b7083e5c668

    • SHA1

      0ce8d0db10d3b54aaef29f6fb2e2503ad14ff2e6

    • SHA256

      aa02de71698402b13698de3585f7ea4efd6f11fea5e5952cc73371e34f0dd71e

    • SHA512

      991611c776da6cd2da10b9863ec64b0d588a2ce0cf66f5dd7c3b9249053c291b729fcf6d79d1c0a4f309f8c617c1616a7af7ee6ef04d2de6327b6ea780ca322c

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrM:X6QFElP6n+gJQMOtEvwDpjBsYK6rM

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks