General

  • Target

    2024-04-20_bce67152b57a93dd358343d9a5412339_cryptolocker

  • Size

    60KB

  • Sample

    240420-qa3jtshd25

  • MD5

    bce67152b57a93dd358343d9a5412339

  • SHA1

    48c1219dc360b39b7f0851f7883963fbfa652bf5

  • SHA256

    db7fafc0783f6c53ad02421cfe6e9ed165d9bbb79f8aef813254d096d9c89bcc

  • SHA512

    f52e44bfd68321963efb1d45adef68e415c0e53b269dad1358286eb47e29ef9d2e91109ff217f620202ca21a046aeabff4e5d4ce2b12ca1a58810029f34253f4

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJT/Et:ZVxkGOtEvwDpjcOi

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_bce67152b57a93dd358343d9a5412339_cryptolocker

    • Size

      60KB

    • MD5

      bce67152b57a93dd358343d9a5412339

    • SHA1

      48c1219dc360b39b7f0851f7883963fbfa652bf5

    • SHA256

      db7fafc0783f6c53ad02421cfe6e9ed165d9bbb79f8aef813254d096d9c89bcc

    • SHA512

      f52e44bfd68321963efb1d45adef68e415c0e53b269dad1358286eb47e29ef9d2e91109ff217f620202ca21a046aeabff4e5d4ce2b12ca1a58810029f34253f4

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJT/Et:ZVxkGOtEvwDpjcOi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks