General

  • Target

    2024-05-12_9e04510cbc22b34d5a7d9a68d6f2c555_cryptolocker

  • Size

    36KB

  • Sample

    240512-fevdxace73

  • MD5

    9e04510cbc22b34d5a7d9a68d6f2c555

  • SHA1

    d00b239c144932d1effabe0c0979e3e89ead02cf

  • SHA256

    88aea2f1e662e583d3e94f68c273aa2504ddf84fc0f8631193012ded65030d19

  • SHA512

    9dc03a5da5b8cdf31c7a6015e9183d7ecba858c323a3b14a698b3de2b83c32b6fc8f020999fd83717e0af97c4c7d6dd39b0c5757ed4e57aecb96cddbac13ecaa

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvNAR:btB9g/WItCSsAGjX7r3BTZvNU

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_9e04510cbc22b34d5a7d9a68d6f2c555_cryptolocker

    • Size

      36KB

    • MD5

      9e04510cbc22b34d5a7d9a68d6f2c555

    • SHA1

      d00b239c144932d1effabe0c0979e3e89ead02cf

    • SHA256

      88aea2f1e662e583d3e94f68c273aa2504ddf84fc0f8631193012ded65030d19

    • SHA512

      9dc03a5da5b8cdf31c7a6015e9183d7ecba858c323a3b14a698b3de2b83c32b6fc8f020999fd83717e0af97c4c7d6dd39b0c5757ed4e57aecb96cddbac13ecaa

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvNAR:btB9g/WItCSsAGjX7r3BTZvNU

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks