General

  • Target

    2024-05-14_e563f4f612c85574c1343ec33c378704_cryptolocker

  • Size

    85KB

  • Sample

    240514-fcw5qabg64

  • MD5

    e563f4f612c85574c1343ec33c378704

  • SHA1

    02c95b695a46e3204b793a4688959a860f7df885

  • SHA256

    b0f18373c958c1e932e09b3db089e41e16498b68f271595de8e1dd813b7b7ed0

  • SHA512

    c46caf4a09f596f5754175749cdd710b472c96c9c5f599c36868f7cfca4ef65f080eaa0b08371b5b3591cba053df6f9d8265c4d7847a6c7e24b6c699ffcb2c87

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsV:TCjsIOtEvwDpj5HE/OUHnSM5

Score
10/10

Malware Config

Targets

    • Target

      2024-05-14_e563f4f612c85574c1343ec33c378704_cryptolocker

    • Size

      85KB

    • MD5

      e563f4f612c85574c1343ec33c378704

    • SHA1

      02c95b695a46e3204b793a4688959a860f7df885

    • SHA256

      b0f18373c958c1e932e09b3db089e41e16498b68f271595de8e1dd813b7b7ed0

    • SHA512

      c46caf4a09f596f5754175749cdd710b472c96c9c5f599c36868f7cfca4ef65f080eaa0b08371b5b3591cba053df6f9d8265c4d7847a6c7e24b6c699ffcb2c87

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsV:TCjsIOtEvwDpj5HE/OUHnSM5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks