General

  • Target

    2024-04-18_c092db8b22ddb3fb69d85b391f9b0001_cryptolocker

  • Size

    78KB

  • Sample

    240418-jwamlsfe27

  • MD5

    c092db8b22ddb3fb69d85b391f9b0001

  • SHA1

    bc0237faa50148448a638adbe181b82e6b7b6fb8

  • SHA256

    8cb5a22e70d6f03c49f596bf3c49d3690c6882900c112b6c7d9823660b1b4454

  • SHA512

    35b98d56a072cfb3e5af101f4814887c8aea3b1d1dc10acdcafe680ddcfa0427d90c77f16f56d60872eba966c6752a39e2ebf739561fe2837b3efa350097c1d0

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNluph:V6a+pOtEvwDpjvpg

Score
10/10

Malware Config

Targets

    • Target

      2024-04-18_c092db8b22ddb3fb69d85b391f9b0001_cryptolocker

    • Size

      78KB

    • MD5

      c092db8b22ddb3fb69d85b391f9b0001

    • SHA1

      bc0237faa50148448a638adbe181b82e6b7b6fb8

    • SHA256

      8cb5a22e70d6f03c49f596bf3c49d3690c6882900c112b6c7d9823660b1b4454

    • SHA512

      35b98d56a072cfb3e5af101f4814887c8aea3b1d1dc10acdcafe680ddcfa0427d90c77f16f56d60872eba966c6752a39e2ebf739561fe2837b3efa350097c1d0

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNluph:V6a+pOtEvwDpjvpg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks