General

  • Target

    2024-04-24_21a19c8e2522ccb854a840b343370234_cryptolocker

  • Size

    39KB

  • Sample

    240424-d3jwzaee36

  • MD5

    21a19c8e2522ccb854a840b343370234

  • SHA1

    8b177da5cb469cd6ea1cdca54324e7b542bb9239

  • SHA256

    4c83c7e8a0e360146e03ff1ee1ddf981f4d7eaeb54055812aeaa96d17da71a08

  • SHA512

    d3fc025bede8ebf1cbafe66eab3d9ac2615756bfd443ef6447950486e362aecb7b16668546e80e91d766beab214975627770e33ffb93c5f422c8a21f175a7308

  • SSDEEP

    768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwT:bA6YcA/X6G0W143QT

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_21a19c8e2522ccb854a840b343370234_cryptolocker

    • Size

      39KB

    • MD5

      21a19c8e2522ccb854a840b343370234

    • SHA1

      8b177da5cb469cd6ea1cdca54324e7b542bb9239

    • SHA256

      4c83c7e8a0e360146e03ff1ee1ddf981f4d7eaeb54055812aeaa96d17da71a08

    • SHA512

      d3fc025bede8ebf1cbafe66eab3d9ac2615756bfd443ef6447950486e362aecb7b16668546e80e91d766beab214975627770e33ffb93c5f422c8a21f175a7308

    • SSDEEP

      768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwT:bA6YcA/X6G0W143QT

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks