General

  • Target

    2024-04-17_e78026f39cedfe80e743167ec70799d1_cryptolocker

  • Size

    74KB

  • Sample

    240417-yp579scg35

  • MD5

    e78026f39cedfe80e743167ec70799d1

  • SHA1

    357afd53d539d6a2ac496048517b44b0595bc9e7

  • SHA256

    b75945e01bd398fb5096ab4679f9200697e3c1f7ec91afdc2722c38b3b1c8d65

  • SHA512

    059314ac889dbe95eeac74800a494c0aa0138eb49bcb0cd53b52d24b5fe17b145e3341c5c3142ee5eefd4787aa232fbfafd3806e087f9943c791277dc18dd6b3

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUb:ZVxkGOtEvwDpjca/

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_e78026f39cedfe80e743167ec70799d1_cryptolocker

    • Size

      74KB

    • MD5

      e78026f39cedfe80e743167ec70799d1

    • SHA1

      357afd53d539d6a2ac496048517b44b0595bc9e7

    • SHA256

      b75945e01bd398fb5096ab4679f9200697e3c1f7ec91afdc2722c38b3b1c8d65

    • SHA512

      059314ac889dbe95eeac74800a494c0aa0138eb49bcb0cd53b52d24b5fe17b145e3341c5c3142ee5eefd4787aa232fbfafd3806e087f9943c791277dc18dd6b3

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUb:ZVxkGOtEvwDpjca/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks