General

  • Target

    2024-04-25_33c42e2f5ede5f603f3857cb59bb74d1_cryptolocker

  • Size

    40KB

  • Sample

    240425-d54zxseg6y

  • MD5

    33c42e2f5ede5f603f3857cb59bb74d1

  • SHA1

    449be65e61e1028f96995414073b752e24d23007

  • SHA256

    3c051d226ff83af9630d5d8a67069e2f3d95961ebc232f4ffc818ac1a1586aa9

  • SHA512

    b189992fd603e5011c6837ed2d382c4f2f687d4d72bad87c6d90e361ab2f42877c4d21c33312a2f1a286c9ff9e9961434f2bfc7ca4ca7d27207932c4e93f3d2a

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyp:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZK

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_33c42e2f5ede5f603f3857cb59bb74d1_cryptolocker

    • Size

      40KB

    • MD5

      33c42e2f5ede5f603f3857cb59bb74d1

    • SHA1

      449be65e61e1028f96995414073b752e24d23007

    • SHA256

      3c051d226ff83af9630d5d8a67069e2f3d95961ebc232f4ffc818ac1a1586aa9

    • SHA512

      b189992fd603e5011c6837ed2d382c4f2f687d4d72bad87c6d90e361ab2f42877c4d21c33312a2f1a286c9ff9e9961434f2bfc7ca4ca7d27207932c4e93f3d2a

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyp:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks