General

  • Target

    2024-04-28_964ce311e80a6c332584d7d574ef41df_cryptolocker

  • Size

    5.5MB

  • Sample

    240428-y9h88sgd58

  • MD5

    964ce311e80a6c332584d7d574ef41df

  • SHA1

    5d2a25a408ea649691ce5a81688093bca5f43f8b

  • SHA256

    a82a8401438962bd97f795500ff6268ee79be3335871b308dfff08f03928d39d

  • SHA512

    5fc5b5f0ae1634fb164b6f5090a0541a9383c5bd9c083e51676dd8ab664304e8df2b786e94a24e2f11554aa8db29b0b09896314413382e9795506d9cd3f10202

  • SSDEEP

    98304:tGiPCjI9nGdFD8nBHm/lOs4HucAmD/YpJJRsH9KsUbIP8Z/AzdKfeT7:fP7aa3uzmD/IJR09KbMPkT07

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_964ce311e80a6c332584d7d574ef41df_cryptolocker

    • Size

      5.5MB

    • MD5

      964ce311e80a6c332584d7d574ef41df

    • SHA1

      5d2a25a408ea649691ce5a81688093bca5f43f8b

    • SHA256

      a82a8401438962bd97f795500ff6268ee79be3335871b308dfff08f03928d39d

    • SHA512

      5fc5b5f0ae1634fb164b6f5090a0541a9383c5bd9c083e51676dd8ab664304e8df2b786e94a24e2f11554aa8db29b0b09896314413382e9795506d9cd3f10202

    • SSDEEP

      98304:tGiPCjI9nGdFD8nBHm/lOs4HucAmD/YpJJRsH9KsUbIP8Z/AzdKfeT7:fP7aa3uzmD/IJR09KbMPkT07

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks