General

  • Target

    2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker

  • Size

    41KB

  • Sample

    240419-t14flahb98

  • MD5

    2ce4d988a7122b520c0d4cdb81c6eff6

  • SHA1

    f15841adc78c6f532139852cc515d25378c2756c

  • SHA256

    da08056e6983e51314a4ded715999c419302b9c24f63795798788ea43e14d3b2

  • SHA512

    687cc59cc9ba09ccce0a569b76ef22c4bfb8276d6102b0d2649ac6b75412ff40c94461a0f38507b8da42bf84278457457933367d0e9f88597541c70282bab6cd

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3uy:bIDOw9a0Dwo3P1ojvUSD79Rz

Score
10/10

Malware Config

Targets

    • Target

      2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker

    • Size

      41KB

    • MD5

      2ce4d988a7122b520c0d4cdb81c6eff6

    • SHA1

      f15841adc78c6f532139852cc515d25378c2756c

    • SHA256

      da08056e6983e51314a4ded715999c419302b9c24f63795798788ea43e14d3b2

    • SHA512

      687cc59cc9ba09ccce0a569b76ef22c4bfb8276d6102b0d2649ac6b75412ff40c94461a0f38507b8da42bf84278457457933367d0e9f88597541c70282bab6cd

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3uy:bIDOw9a0Dwo3P1ojvUSD79Rz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks