General

  • Target

    2024-05-12_4aa731883dc4672f1f514a585a6c7a13_cryptolocker

  • Size

    96KB

  • Sample

    240512-eel7vsad27

  • MD5

    4aa731883dc4672f1f514a585a6c7a13

  • SHA1

    94fadaaf12aaedb89851f13bce97f2a7bac05fb4

  • SHA256

    c34e0ebfcf29ed576f857784887ad1e7eadd1e00ac4aec59e0892b5aaa51fd77

  • SHA512

    8dda024f3235d668ce9fbf5a01c0f04d5716d4cdd42fba59df84ce4304ee0832ddb93fd277431c59d00b82e4b7d309dc372da0af243e1e794946e4953adeaad9

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpq:V6a+pOtEvwDpjtzF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_4aa731883dc4672f1f514a585a6c7a13_cryptolocker

    • Size

      96KB

    • MD5

      4aa731883dc4672f1f514a585a6c7a13

    • SHA1

      94fadaaf12aaedb89851f13bce97f2a7bac05fb4

    • SHA256

      c34e0ebfcf29ed576f857784887ad1e7eadd1e00ac4aec59e0892b5aaa51fd77

    • SHA512

      8dda024f3235d668ce9fbf5a01c0f04d5716d4cdd42fba59df84ce4304ee0832ddb93fd277431c59d00b82e4b7d309dc372da0af243e1e794946e4953adeaad9

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpq:V6a+pOtEvwDpjtzF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks