General

  • Target

    2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker

  • Size

    82KB

  • Sample

    240427-wnrblsdf96

  • MD5

    4206154e3997f2c26b810ada1d398ece

  • SHA1

    2fa2f8a5891b1a30be30e4c41cbfdbff51f1b070

  • SHA256

    c58c086797767ab9642474f7319e41a1341bbd080505483633c8642c2c3db1e3

  • SHA512

    93a859c8f06caa68b6974d743fe687880c1c149d4248b45e81cc04df71fecbfa231113e9ed983ddd9112582fdc507665d2436cdcf95c65a76dd00a90eecdb849

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhx:TCjsIOtEvwDpj5HE/OUHnSMd

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker

    • Size

      82KB

    • MD5

      4206154e3997f2c26b810ada1d398ece

    • SHA1

      2fa2f8a5891b1a30be30e4c41cbfdbff51f1b070

    • SHA256

      c58c086797767ab9642474f7319e41a1341bbd080505483633c8642c2c3db1e3

    • SHA512

      93a859c8f06caa68b6974d743fe687880c1c149d4248b45e81cc04df71fecbfa231113e9ed983ddd9112582fdc507665d2436cdcf95c65a76dd00a90eecdb849

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhx:TCjsIOtEvwDpj5HE/OUHnSMd

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks