General

  • Target

    2024-05-12_dd00042d6c107ffaca1266f1e5339315_cryptolocker

  • Size

    36KB

  • Sample

    240512-w85pqsde54

  • MD5

    dd00042d6c107ffaca1266f1e5339315

  • SHA1

    d39e805d86ae373cbd0fffa8296ebc0a28aa9ed9

  • SHA256

    4928e78ab03cf9f4d2fcdafd76486b7a65061485163f2f1734058ff71f01b937

  • SHA512

    24f9d8d42180ca52884f9637ec3f2c592150e0cee6b565bb91623ae757c9681acf857d8107d1ebb1702f641eb77873eae4b16dc284119a95393ad3c021271952

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvUo:btB9g/WItCSsAGjX7r3BTZvUo

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_dd00042d6c107ffaca1266f1e5339315_cryptolocker

    • Size

      36KB

    • MD5

      dd00042d6c107ffaca1266f1e5339315

    • SHA1

      d39e805d86ae373cbd0fffa8296ebc0a28aa9ed9

    • SHA256

      4928e78ab03cf9f4d2fcdafd76486b7a65061485163f2f1734058ff71f01b937

    • SHA512

      24f9d8d42180ca52884f9637ec3f2c592150e0cee6b565bb91623ae757c9681acf857d8107d1ebb1702f641eb77873eae4b16dc284119a95393ad3c021271952

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvUo:btB9g/WItCSsAGjX7r3BTZvUo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks