General

  • Target

    2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker

  • Size

    92KB

  • Sample

    240501-erk6bsfd5t

  • MD5

    4884c900bd7a26a38c3bec980d163f16

  • SHA1

    072bdc0a846a432c534da95fc51c962768f8f843

  • SHA256

    f650750f51604b8a2fe02c8d4e910f0f1a81e058502561f94260bfec6d1c7a38

  • SHA512

    f40b658b4735483fcbab2171d4edf617beb88c5e517d0ad1c7db27962022aa0108cde5c103425fad2ac8cd0e0ab9035954a1046bd677438c4b2fc0fafe2fdaba

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL0f:V6a+pOtEvwDpjtzs

Score
10/10

Malware Config

Targets

    • Target

      2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker

    • Size

      92KB

    • MD5

      4884c900bd7a26a38c3bec980d163f16

    • SHA1

      072bdc0a846a432c534da95fc51c962768f8f843

    • SHA256

      f650750f51604b8a2fe02c8d4e910f0f1a81e058502561f94260bfec6d1c7a38

    • SHA512

      f40b658b4735483fcbab2171d4edf617beb88c5e517d0ad1c7db27962022aa0108cde5c103425fad2ac8cd0e0ab9035954a1046bd677438c4b2fc0fafe2fdaba

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL0f:V6a+pOtEvwDpjtzs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks