General

  • Target

    2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker

  • Size

    36KB

  • Sample

    240426-kdfxcacg3t

  • MD5

    9749a6f1af1757b24651132caa3e1f51

  • SHA1

    85e84b994589decce315152c971c2706bcc9a1c5

  • SHA256

    cd9efc0eebd4f7eb532723f9c21d888bfe81053a81abb7261660269275c64cae

  • SHA512

    8b5a61f7ad6bdca2e80824417829b6366243ed0ff5177c3de6fbf089112d4145cec81ee2ef032888d30ab79fa7445a91fbe55e18f3a449d1a560bc5a0914b978

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/u:fT+hsMQMOtEvwDpjoIHm

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker

    • Size

      36KB

    • MD5

      9749a6f1af1757b24651132caa3e1f51

    • SHA1

      85e84b994589decce315152c971c2706bcc9a1c5

    • SHA256

      cd9efc0eebd4f7eb532723f9c21d888bfe81053a81abb7261660269275c64cae

    • SHA512

      8b5a61f7ad6bdca2e80824417829b6366243ed0ff5177c3de6fbf089112d4145cec81ee2ef032888d30ab79fa7445a91fbe55e18f3a449d1a560bc5a0914b978

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/u:fT+hsMQMOtEvwDpjoIHm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks