General

  • Target

    2024-04-25_c034c4d7ff9ccd5e82c8ca61f94c28f2_cryptolocker

  • Size

    42KB

  • Sample

    240425-ddmassec8y

  • MD5

    c034c4d7ff9ccd5e82c8ca61f94c28f2

  • SHA1

    878f6fefea6cb98f29752b27a5fb2422a25faa9f

  • SHA256

    8091d4877fa5adb55a8a41fbb9c1600079ae6eeee0f9279e17974d270be88bcc

  • SHA512

    1e1f4483b2b81bc55c05c3cc1832a8a24917d55fd553101a3ef087b1a156211e4afc70a57284c0c8fc35edc9d22d9ea2f7b10f315b589610d4cad079be24d494

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA9DU0:b/pYayGig5HjS3NPA9Dn

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_c034c4d7ff9ccd5e82c8ca61f94c28f2_cryptolocker

    • Size

      42KB

    • MD5

      c034c4d7ff9ccd5e82c8ca61f94c28f2

    • SHA1

      878f6fefea6cb98f29752b27a5fb2422a25faa9f

    • SHA256

      8091d4877fa5adb55a8a41fbb9c1600079ae6eeee0f9279e17974d270be88bcc

    • SHA512

      1e1f4483b2b81bc55c05c3cc1832a8a24917d55fd553101a3ef087b1a156211e4afc70a57284c0c8fc35edc9d22d9ea2f7b10f315b589610d4cad079be24d494

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA9DU0:b/pYayGig5HjS3NPA9Dn

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Network Service Discovery

1
T1046

Tasks