General

  • Target

    2024-05-09_edd91209f685c24a99c7b631790bc3b7_cryptolocker

  • Size

    40KB

  • Sample

    240509-sgk98sfh8t

  • MD5

    edd91209f685c24a99c7b631790bc3b7

  • SHA1

    3056a617a6a6eaaedc98680cef4885de91959b4e

  • SHA256

    a1e561993025b0e2509552ae0aebb5f65d4b62ff4a1f2d3a1fc0720bff58e284

  • SHA512

    6a9e9189ef34f57c57d78b1a2741a34db2815469bca0952fc5893a3d65dd7a1546e5ef69c81ae4bc01b91acc485bd0285862b421d0bfd1a087fc239cbb8c8723

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Eyr:btB9g/WItCSsAGjX7e9N0hunKLYNr

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_edd91209f685c24a99c7b631790bc3b7_cryptolocker

    • Size

      40KB

    • MD5

      edd91209f685c24a99c7b631790bc3b7

    • SHA1

      3056a617a6a6eaaedc98680cef4885de91959b4e

    • SHA256

      a1e561993025b0e2509552ae0aebb5f65d4b62ff4a1f2d3a1fc0720bff58e284

    • SHA512

      6a9e9189ef34f57c57d78b1a2741a34db2815469bca0952fc5893a3d65dd7a1546e5ef69c81ae4bc01b91acc485bd0285862b421d0bfd1a087fc239cbb8c8723

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Eyr:btB9g/WItCSsAGjX7e9N0hunKLYNr

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks