General

  • Target

    2024-04-20_fa91e38de8c13d5a31fc05ce533fd6eb_cryptolocker

  • Size

    60KB

  • Sample

    240420-xrdelafe32

  • MD5

    fa91e38de8c13d5a31fc05ce533fd6eb

  • SHA1

    40b29808a88ffd223a36628d27eb0073250f2719

  • SHA256

    6838fa1b49c3a991b56959caf9c7e648f3cbefdf762c336b4bcb2930e11994e6

  • SHA512

    fce974715fc2ecda82279a163d17f6e8e4c6615168f4b27e78bef46de65788d7e5d612e0f2ba7a528ffac42c3a3bfa68fa16c92aeed93fba8a5e613d1ae87d0b

  • SSDEEP

    768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9E:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWV

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_fa91e38de8c13d5a31fc05ce533fd6eb_cryptolocker

    • Size

      60KB

    • MD5

      fa91e38de8c13d5a31fc05ce533fd6eb

    • SHA1

      40b29808a88ffd223a36628d27eb0073250f2719

    • SHA256

      6838fa1b49c3a991b56959caf9c7e648f3cbefdf762c336b4bcb2930e11994e6

    • SHA512

      fce974715fc2ecda82279a163d17f6e8e4c6615168f4b27e78bef46de65788d7e5d612e0f2ba7a528ffac42c3a3bfa68fa16c92aeed93fba8a5e613d1ae87d0b

    • SSDEEP

      768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9E:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWV

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks