General

  • Target

    2024-04-18_d27ae9200bd1bbc74fe54daa2d4949af_cryptolocker

  • Size

    94KB

  • Sample

    240418-3gvtsabb4w

  • MD5

    d27ae9200bd1bbc74fe54daa2d4949af

  • SHA1

    3473625bbbec9de00064645b3ce384ad86831a32

  • SHA256

    403ee55c2b7aad3f8908ff74d427174509b9c0c7d77c0e57aefde584beb36932

  • SHA512

    ef2eebf1fe4697870a592f24f440de1beaef7877a063669d1d7ca7230484919f9daaa662a39d3e26ca7d75251f6a76c5af005dc05778a3e20feb04cc9daa5869

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgi:V6a+pOtEvwDpjtzm

Score
10/10

Malware Config

Targets

    • Target

      2024-04-18_d27ae9200bd1bbc74fe54daa2d4949af_cryptolocker

    • Size

      94KB

    • MD5

      d27ae9200bd1bbc74fe54daa2d4949af

    • SHA1

      3473625bbbec9de00064645b3ce384ad86831a32

    • SHA256

      403ee55c2b7aad3f8908ff74d427174509b9c0c7d77c0e57aefde584beb36932

    • SHA512

      ef2eebf1fe4697870a592f24f440de1beaef7877a063669d1d7ca7230484919f9daaa662a39d3e26ca7d75251f6a76c5af005dc05778a3e20feb04cc9daa5869

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgi:V6a+pOtEvwDpjtzm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks