General

  • Target

    2024-05-08_ff321fad115766d8ac5a7f873ae02da9_cryptolocker

  • Size

    53KB

  • Sample

    240508-ea3daaha5y

  • MD5

    ff321fad115766d8ac5a7f873ae02da9

  • SHA1

    aba34c31672ff51e81a702a196e6bfdeb8966446

  • SHA256

    71270f9cd20a9809f1f1c6d06424734bea9d9a599705ab3845719ce57171c192

  • SHA512

    4068943338d0cf347fb71e9f26ffd4e7ffaec3c76a953a6f3ad5d4b356596620744846fbcfd21648228a678bf9bb8df8df45c81694f21b32b8aa7383f997fd61

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5KG:ZVxkGOtEvwDpjcV

Score
10/10

Malware Config

Targets

    • Target

      2024-05-08_ff321fad115766d8ac5a7f873ae02da9_cryptolocker

    • Size

      53KB

    • MD5

      ff321fad115766d8ac5a7f873ae02da9

    • SHA1

      aba34c31672ff51e81a702a196e6bfdeb8966446

    • SHA256

      71270f9cd20a9809f1f1c6d06424734bea9d9a599705ab3845719ce57171c192

    • SHA512

      4068943338d0cf347fb71e9f26ffd4e7ffaec3c76a953a6f3ad5d4b356596620744846fbcfd21648228a678bf9bb8df8df45c81694f21b32b8aa7383f997fd61

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5KG:ZVxkGOtEvwDpjcV

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks