General

  • Target

    2024-04-30_38f7d8e61987059dbc4c9539ba5be29e_cryptolocker

  • Size

    61KB

  • Sample

    240430-zy23msfg61

  • MD5

    38f7d8e61987059dbc4c9539ba5be29e

  • SHA1

    78a1181309eca7a1a0bbcb657f75ad75eafd8f66

  • SHA256

    3023f6611c5022bbf89018c5890315f4e9dd9c2f8788ab17ada10fdbfca6eda8

  • SHA512

    e9eb3ea49efbb68a9c177413302e6a8178065b9449d856f1cebb4c99ce711711a5fcc9cee7475c7038b1786d3b6ee17f4e928fb70c20be5e8b24b72738a1d3d2

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+l/Nex8:ZVxkGOtEvwDpjs

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_38f7d8e61987059dbc4c9539ba5be29e_cryptolocker

    • Size

      61KB

    • MD5

      38f7d8e61987059dbc4c9539ba5be29e

    • SHA1

      78a1181309eca7a1a0bbcb657f75ad75eafd8f66

    • SHA256

      3023f6611c5022bbf89018c5890315f4e9dd9c2f8788ab17ada10fdbfca6eda8

    • SHA512

      e9eb3ea49efbb68a9c177413302e6a8178065b9449d856f1cebb4c99ce711711a5fcc9cee7475c7038b1786d3b6ee17f4e928fb70c20be5e8b24b72738a1d3d2

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+l/Nex8:ZVxkGOtEvwDpjs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks