General

  • Target

    2024-04-30_f81d2bacf67c66af7c5ac2b2aaa40c42_cryptolocker

  • Size

    35KB

  • Sample

    240430-hk3nkseg33

  • MD5

    f81d2bacf67c66af7c5ac2b2aaa40c42

  • SHA1

    0d1a7ef8e352b8ff86915699e625b9a4e27c108d

  • SHA256

    2ed3f9b37e2de65761fa0f2bbd63afd4901818010d9d68805b3a3d5fbba00511

  • SHA512

    5525cbdaf28959223e3dc6f7f225cc5c8cadc2fe98a67dbd62850541cdb3e8e8ced02f83feec15e7e6d2072fe0417cfc2b90dea3eab326bfd5c31309f91b1323

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNCc:bAvJCYOOvbRPDEgXRc+BAILYT

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_f81d2bacf67c66af7c5ac2b2aaa40c42_cryptolocker

    • Size

      35KB

    • MD5

      f81d2bacf67c66af7c5ac2b2aaa40c42

    • SHA1

      0d1a7ef8e352b8ff86915699e625b9a4e27c108d

    • SHA256

      2ed3f9b37e2de65761fa0f2bbd63afd4901818010d9d68805b3a3d5fbba00511

    • SHA512

      5525cbdaf28959223e3dc6f7f225cc5c8cadc2fe98a67dbd62850541cdb3e8e8ced02f83feec15e7e6d2072fe0417cfc2b90dea3eab326bfd5c31309f91b1323

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNCc:bAvJCYOOvbRPDEgXRc+BAILYT

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks