General

  • Target

    2024-05-08_8d20e2978881dcbcfc9aa36f99307056_cryptolocker

  • Size

    49KB

  • Sample

    240508-fa9yssdh58

  • MD5

    8d20e2978881dcbcfc9aa36f99307056

  • SHA1

    d48221d54782d67481df72be0fafaf64eca6dc19

  • SHA256

    b6a079e1880775898afdf9dfab9f4f713139fd3f3c6c1fbe88d83648dee958fd

  • SHA512

    16bab8a545620c104713306b309100bfbd2e6e8d2428501d94ec69c5b76dfd85a262e544ac3c8c74796ba8e407a289f51464e40faeacd40c34a9c2539d9a464e

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ15x8rx:ZVxkGOtEvwDpjch

Score
10/10

Malware Config

Targets

    • Target

      2024-05-08_8d20e2978881dcbcfc9aa36f99307056_cryptolocker

    • Size

      49KB

    • MD5

      8d20e2978881dcbcfc9aa36f99307056

    • SHA1

      d48221d54782d67481df72be0fafaf64eca6dc19

    • SHA256

      b6a079e1880775898afdf9dfab9f4f713139fd3f3c6c1fbe88d83648dee958fd

    • SHA512

      16bab8a545620c104713306b309100bfbd2e6e8d2428501d94ec69c5b76dfd85a262e544ac3c8c74796ba8e407a289f51464e40faeacd40c34a9c2539d9a464e

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ15x8rx:ZVxkGOtEvwDpjch

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks