General

  • Target

    2024-05-11_facfee175982b9a66be8ca21c3d86351_cryptolocker

  • Size

    54KB

  • Sample

    240511-rmav1sbc4y

  • MD5

    facfee175982b9a66be8ca21c3d86351

  • SHA1

    9af550fc9463af1f30778df603d630409aea1103

  • SHA256

    3fac74cd7a7965caa8c87697f7b6b709eaacaa80cef36268dfc2ec5a250b3fab

  • SHA512

    2dc7e698bd17647ba4c6f76acd67c253a4320d103b8109867ba2fb8374072b19067512020bacb9df00b5ac2fc5c0f9db4d593afd2672660ef35633f23167a43e

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6s:bc/y2lm6iH/NLp17zrV9G

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_facfee175982b9a66be8ca21c3d86351_cryptolocker

    • Size

      54KB

    • MD5

      facfee175982b9a66be8ca21c3d86351

    • SHA1

      9af550fc9463af1f30778df603d630409aea1103

    • SHA256

      3fac74cd7a7965caa8c87697f7b6b709eaacaa80cef36268dfc2ec5a250b3fab

    • SHA512

      2dc7e698bd17647ba4c6f76acd67c253a4320d103b8109867ba2fb8374072b19067512020bacb9df00b5ac2fc5c0f9db4d593afd2672660ef35633f23167a43e

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6s:bc/y2lm6iH/NLp17zrV9G

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks