General

  • Target

    2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker

  • Size

    41KB

  • Sample

    240511-t1jq7aad24

  • MD5

    af567942557daa1cce38dca391c34796

  • SHA1

    9782f9dba7ec2b32002b53b81e88040cbb2437e1

  • SHA256

    86d4b60e3d52dee6a0f58492bedc1aee7f4eb90692201ca343af2559a0b423ee

  • SHA512

    d231c0a7427481e587dcc272408fc121ba840a8741b51a9658f90f4f1c70c415373201090d0c74806171cfab8eab9357bc1a005ea8c9a06808508b1f11941447

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7q:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7q

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker

    • Size

      41KB

    • MD5

      af567942557daa1cce38dca391c34796

    • SHA1

      9782f9dba7ec2b32002b53b81e88040cbb2437e1

    • SHA256

      86d4b60e3d52dee6a0f58492bedc1aee7f4eb90692201ca343af2559a0b423ee

    • SHA512

      d231c0a7427481e587dcc272408fc121ba840a8741b51a9658f90f4f1c70c415373201090d0c74806171cfab8eab9357bc1a005ea8c9a06808508b1f11941447

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7q:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7q

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks