General

  • Target

    2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker

  • Size

    81KB

  • Sample

    240420-hl3pzabf4z

  • MD5

    e845a3fc97d69e1d34c1a8f71b1e892a

  • SHA1

    9e21b0b61d7810ba295d672c3063fa0d595d7174

  • SHA256

    6853f5133757eb1998809f20538dbcecdfc5970ea3c83c98f94aef1afb9693f9

  • SHA512

    2ea268562d5b5c61b52a0da4089673e6d82e87f34710fa1c0b698a416d7067d7f0e2e1974fc33f1c4a1eae7062f0b197f0c5f40074c521e2083bcd9d2a566ccc

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqW:vCjsIOtEvwDpj5H9YvQd27

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker

    • Size

      81KB

    • MD5

      e845a3fc97d69e1d34c1a8f71b1e892a

    • SHA1

      9e21b0b61d7810ba295d672c3063fa0d595d7174

    • SHA256

      6853f5133757eb1998809f20538dbcecdfc5970ea3c83c98f94aef1afb9693f9

    • SHA512

      2ea268562d5b5c61b52a0da4089673e6d82e87f34710fa1c0b698a416d7067d7f0e2e1974fc33f1c4a1eae7062f0b197f0c5f40074c521e2083bcd9d2a566ccc

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqW:vCjsIOtEvwDpj5H9YvQd27

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks