General

  • Target

    2024-05-11_2ecc6fa049493adcd984f67ce7063174_cryptolocker

  • Size

    39KB

  • Sample

    240512-zw5qrafg21

  • MD5

    2ecc6fa049493adcd984f67ce7063174

  • SHA1

    5627a5026a820e11b8e0bbc5bfe5ee82d38315e7

  • SHA256

    53aa3ff53ccb472b73cced1091a0b9284c5d7b7c3149bf03d7bb32f543a0cbc1

  • SHA512

    718c9080ae456a94ccfd9d2850225d33e3489aa045a3c4c72dc16a3db7a1145f09b47f517eaab11075b558cc31e1360ca27f3b6236d9eb2607d62d9fc5f72c6c

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSyHmYvV8In:btB9g/WItCSsAGjX7e9N0hunRvGIV8In

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_2ecc6fa049493adcd984f67ce7063174_cryptolocker

    • Size

      39KB

    • MD5

      2ecc6fa049493adcd984f67ce7063174

    • SHA1

      5627a5026a820e11b8e0bbc5bfe5ee82d38315e7

    • SHA256

      53aa3ff53ccb472b73cced1091a0b9284c5d7b7c3149bf03d7bb32f543a0cbc1

    • SHA512

      718c9080ae456a94ccfd9d2850225d33e3489aa045a3c4c72dc16a3db7a1145f09b47f517eaab11075b558cc31e1360ca27f3b6236d9eb2607d62d9fc5f72c6c

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSyHmYvV8In:btB9g/WItCSsAGjX7e9N0hunRvGIV8In

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks