General

  • Target

    2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker

  • Size

    34KB

  • Sample

    240503-d7rsdagc47

  • MD5

    625320a6345714752e0bf08e4109e992

  • SHA1

    b1fff4ee18a808342a676d135267667a7ffa7195

  • SHA256

    e522ec16aa6f7a999f4ecb9ec0030c6db16c2f425a41830f788ca8f36999fd86

  • SHA512

    292733ff47258d14ffc847c3d136955f631269471c6508faec426e7f83f772e16b2ff0a784e322c914ee4ab65109d118e7abebce45d589f6ddff821eaa230690

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp75:bxNrC7kYo1Fxf2rY19

Score
10/10

Malware Config

Targets

    • Target

      2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker

    • Size

      34KB

    • MD5

      625320a6345714752e0bf08e4109e992

    • SHA1

      b1fff4ee18a808342a676d135267667a7ffa7195

    • SHA256

      e522ec16aa6f7a999f4ecb9ec0030c6db16c2f425a41830f788ca8f36999fd86

    • SHA512

      292733ff47258d14ffc847c3d136955f631269471c6508faec426e7f83f772e16b2ff0a784e322c914ee4ab65109d118e7abebce45d589f6ddff821eaa230690

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp75:bxNrC7kYo1Fxf2rY19

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks