General

  • Target

    2024-04-26_013bacb8d07453bccc2b07569b25783a_cryptolocker

  • Size

    38KB

  • Sample

    240426-ezskdahh84

  • MD5

    013bacb8d07453bccc2b07569b25783a

  • SHA1

    2c78dd30f1a60196c51862ab7a73bf21b5f36824

  • SHA256

    7e19f4287fc914a6b91486619443aabd94b46da58b207e47bc99fa695235e626

  • SHA512

    bc69eb71caecda519bf3f4b79a4110d019deee93f8f90203273897d2f698c8a2743d48a689cdb8bad714110ef85d6ecbfbd9851117ccf11256774c8bc1408c30

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axa:V6QFElP6n+gMQMOtEvwDpjyaYaI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_013bacb8d07453bccc2b07569b25783a_cryptolocker

    • Size

      38KB

    • MD5

      013bacb8d07453bccc2b07569b25783a

    • SHA1

      2c78dd30f1a60196c51862ab7a73bf21b5f36824

    • SHA256

      7e19f4287fc914a6b91486619443aabd94b46da58b207e47bc99fa695235e626

    • SHA512

      bc69eb71caecda519bf3f4b79a4110d019deee93f8f90203273897d2f698c8a2743d48a689cdb8bad714110ef85d6ecbfbd9851117ccf11256774c8bc1408c30

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axa:V6QFElP6n+gMQMOtEvwDpjyaYaI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks