General

  • Target

    2024-04-28_49549d202b1b52a2a38c01dd4434c35f_cryptolocker

  • Size

    61KB

  • Sample

    240428-x6pfeafe2z

  • MD5

    49549d202b1b52a2a38c01dd4434c35f

  • SHA1

    74e8903edaa5d751c944c12c42fe4a3d60ee43ec

  • SHA256

    f205d33e6d4897acc0e722badec73f1bdebb314918da2a6b1a63b900ec4de630

  • SHA512

    25093720f82bfee2c9876fd4ff009d94b81a7da9e3ecbbae11b5ab9d8c08783fba3c03647cb6a9c1567523e788f4697da6d8f43e2389c224d66bbe857887a4a7

  • SSDEEP

    768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9p:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWRK

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_49549d202b1b52a2a38c01dd4434c35f_cryptolocker

    • Size

      61KB

    • MD5

      49549d202b1b52a2a38c01dd4434c35f

    • SHA1

      74e8903edaa5d751c944c12c42fe4a3d60ee43ec

    • SHA256

      f205d33e6d4897acc0e722badec73f1bdebb314918da2a6b1a63b900ec4de630

    • SHA512

      25093720f82bfee2c9876fd4ff009d94b81a7da9e3ecbbae11b5ab9d8c08783fba3c03647cb6a9c1567523e788f4697da6d8f43e2389c224d66bbe857887a4a7

    • SSDEEP

      768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9p:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWRK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks