General

  • Target

    2024-05-12_975aaa8fa54ee2e503c4877b4a074ce8_cryptolocker

  • Size

    85KB

  • Sample

    240512-sy5efafe64

  • MD5

    975aaa8fa54ee2e503c4877b4a074ce8

  • SHA1

    bdda24139635c4b68f173251e826dedcda4d43b4

  • SHA256

    efd9a957b88062dd89db7bca422cd8299226f79978cc67294ba425f4a49da4fa

  • SHA512

    583d721bd6e70df9182033328aff81e98c3006e32dbf2b60c06ca8ffc5749d07aeae97de87709a94e024321f468ff9c364eb18968a1206c15e942ebf7f052b1e

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCs8:TCjsIOtEvwDpj5HE/OUHnSMA

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_975aaa8fa54ee2e503c4877b4a074ce8_cryptolocker

    • Size

      85KB

    • MD5

      975aaa8fa54ee2e503c4877b4a074ce8

    • SHA1

      bdda24139635c4b68f173251e826dedcda4d43b4

    • SHA256

      efd9a957b88062dd89db7bca422cd8299226f79978cc67294ba425f4a49da4fa

    • SHA512

      583d721bd6e70df9182033328aff81e98c3006e32dbf2b60c06ca8ffc5749d07aeae97de87709a94e024321f468ff9c364eb18968a1206c15e942ebf7f052b1e

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCs8:TCjsIOtEvwDpj5HE/OUHnSMA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks