General

  • Target

    2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker

  • Size

    51KB

  • Sample

    240429-xhew3aac41

  • MD5

    5ff99995b969d706a524c68045e6c0b8

  • SHA1

    681f4d83be19194e12e2226f101604f4bec122ab

  • SHA256

    505969febb9cec947e49b4d4bea4fa37caa65776531b2a89123706f63bbc6adb

  • SHA512

    126431d507c75de7e1c18c55b1df9ff4c04f4cce1d2b8f6bd8aa67ef70842de081362597f3672dc34a914ee2e9382b039543f10ff2c59b21ec5a618adf564027

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS:79mqyNhQMOtEvwDpjBxe8GGfS

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker

    • Size

      51KB

    • MD5

      5ff99995b969d706a524c68045e6c0b8

    • SHA1

      681f4d83be19194e12e2226f101604f4bec122ab

    • SHA256

      505969febb9cec947e49b4d4bea4fa37caa65776531b2a89123706f63bbc6adb

    • SHA512

      126431d507c75de7e1c18c55b1df9ff4c04f4cce1d2b8f6bd8aa67ef70842de081362597f3672dc34a914ee2e9382b039543f10ff2c59b21ec5a618adf564027

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS:79mqyNhQMOtEvwDpjBxe8GGfS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks