General

  • Target

    2024-04-20_f12851a675097374574b19e17650712f_cryptolocker

  • Size

    61KB

  • Sample

    240420-fj9pdsha69

  • MD5

    f12851a675097374574b19e17650712f

  • SHA1

    31eddace3805aaccfb8802b6f61551c71d9c27aa

  • SHA256

    e7ba035b2e0035a05c5b51c3130d73be305c71865f734556e44781ac78661af5

  • SHA512

    54b0bed721d9bcd15d6cc713db5045a9b8442e8ef741355c42d2edb3437950d7c754d3af005a033101d06cea3fe9af54bfd1cf1cf29512a72b76e12017fd2a29

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5q:V6a+pOtEvwDpjvD

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_f12851a675097374574b19e17650712f_cryptolocker

    • Size

      61KB

    • MD5

      f12851a675097374574b19e17650712f

    • SHA1

      31eddace3805aaccfb8802b6f61551c71d9c27aa

    • SHA256

      e7ba035b2e0035a05c5b51c3130d73be305c71865f734556e44781ac78661af5

    • SHA512

      54b0bed721d9bcd15d6cc713db5045a9b8442e8ef741355c42d2edb3437950d7c754d3af005a033101d06cea3fe9af54bfd1cf1cf29512a72b76e12017fd2a29

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5q:V6a+pOtEvwDpjvD

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks