General

  • Target

    2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker

  • Size

    38KB

  • Sample

    240512-pl3tashf98

  • MD5

    4b6ce2cdd406a7974093f03562488b0e

  • SHA1

    d2ced22ced9e941e1bc44c538d9def949382de08

  • SHA256

    1eca48ebeeaf4a61c022065f469e2c1fd76ce51d32ae331622a9dd8965820b4e

  • SHA512

    4b03220c4a3ac2812cb3b9f6c7f162f800451cc97f1c1d97425082117181c4290c664d253693f6e448a288f06d6e2b4e817e77d37559c1347308573b2463e3cc

  • SSDEEP

    768:bA74zYcgT/Ekd0ryfj86U8zbUYqSFq6pw:bA6YcA/X6GISzRqAw

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker

    • Size

      38KB

    • MD5

      4b6ce2cdd406a7974093f03562488b0e

    • SHA1

      d2ced22ced9e941e1bc44c538d9def949382de08

    • SHA256

      1eca48ebeeaf4a61c022065f469e2c1fd76ce51d32ae331622a9dd8965820b4e

    • SHA512

      4b03220c4a3ac2812cb3b9f6c7f162f800451cc97f1c1d97425082117181c4290c664d253693f6e448a288f06d6e2b4e817e77d37559c1347308573b2463e3cc

    • SSDEEP

      768:bA74zYcgT/Ekd0ryfj86U8zbUYqSFq6pw:bA6YcA/X6GISzRqAw

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks