General

  • Target

    2024-04-20_02bc82bed706de22de0aaddbbd0c25c0_cryptolocker

  • Size

    81KB

  • Sample

    240420-3cbv4scf69

  • MD5

    02bc82bed706de22de0aaddbbd0c25c0

  • SHA1

    affc3ccb910d675c63867f340a9aff77910b7cab

  • SHA256

    25d3223412f0ce38c616947240e8acac9a54dc6408562c117115eef76a8f1f12

  • SHA512

    8b3427d60ed5409dd825f2fa512c8ade7bfa6e846b1bc95c9f31fb6862bf1ff5c7d1a01b5a2e57ed797e15b377888de9cce2d3b9096b8b5fdacd505de39294f5

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVh:vCjsIOtEvwDpj5H9YvQd2W

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_02bc82bed706de22de0aaddbbd0c25c0_cryptolocker

    • Size

      81KB

    • MD5

      02bc82bed706de22de0aaddbbd0c25c0

    • SHA1

      affc3ccb910d675c63867f340a9aff77910b7cab

    • SHA256

      25d3223412f0ce38c616947240e8acac9a54dc6408562c117115eef76a8f1f12

    • SHA512

      8b3427d60ed5409dd825f2fa512c8ade7bfa6e846b1bc95c9f31fb6862bf1ff5c7d1a01b5a2e57ed797e15b377888de9cce2d3b9096b8b5fdacd505de39294f5

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVh:vCjsIOtEvwDpj5H9YvQd2W

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks