General

  • Target

    2024-05-12_7137d6e20f39c01693b01a9f674928a0_cryptolocker

  • Size

    38KB

  • Sample

    240512-emd68aag74

  • MD5

    7137d6e20f39c01693b01a9f674928a0

  • SHA1

    bb00039e93822e76de3839b7e896b40eeec17438

  • SHA256

    cd870ceacaee02b031006a8f3bf5ab66973fc54a547cf6d88c33bc95f5ae2dea

  • SHA512

    6929024191ad3cc3ad5bef3d7066bef79da993eff695a98e7d4a98e89245e6213841d98e9321308b4011efe1f33374b6224a40cb6538ee634f267461ea21b7db

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUq:ZzFbxmLPWQMOtEvwDpjLev

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_7137d6e20f39c01693b01a9f674928a0_cryptolocker

    • Size

      38KB

    • MD5

      7137d6e20f39c01693b01a9f674928a0

    • SHA1

      bb00039e93822e76de3839b7e896b40eeec17438

    • SHA256

      cd870ceacaee02b031006a8f3bf5ab66973fc54a547cf6d88c33bc95f5ae2dea

    • SHA512

      6929024191ad3cc3ad5bef3d7066bef79da993eff695a98e7d4a98e89245e6213841d98e9321308b4011efe1f33374b6224a40cb6538ee634f267461ea21b7db

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUq:ZzFbxmLPWQMOtEvwDpjLev

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks