General

  • Target

    2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker

  • Size

    54KB

  • Sample

    240429-3v4zlsea89

  • MD5

    c3edfc278fa0ee64c19e765f3820ceec

  • SHA1

    8e98dfc1653f07bd41a4b2511a972472d592b4a1

  • SHA256

    406fc3b51d16cdee72eff7a43f7dfd7d2ff220803323484ba3ca74bc000d1b66

  • SHA512

    63d290da2a1812c324660831a801b80605c8dbff884788cd4aea8d27f2252205d67047fef829cbb9400a5387feed0d96cd2674cdf91e50a8a2570bbe05f2678b

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbqjasqS:bIDOw9a0DwitDZzcTmL

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker

    • Size

      54KB

    • MD5

      c3edfc278fa0ee64c19e765f3820ceec

    • SHA1

      8e98dfc1653f07bd41a4b2511a972472d592b4a1

    • SHA256

      406fc3b51d16cdee72eff7a43f7dfd7d2ff220803323484ba3ca74bc000d1b66

    • SHA512

      63d290da2a1812c324660831a801b80605c8dbff884788cd4aea8d27f2252205d67047fef829cbb9400a5387feed0d96cd2674cdf91e50a8a2570bbe05f2678b

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbqjasqS:bIDOw9a0DwitDZzcTmL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks