General

  • Target

    2024-05-14_324770e068ff0dc4498c24274390e800_cryptolocker

  • Size

    45KB

  • Sample

    240514-vgh6zsfe33

  • MD5

    324770e068ff0dc4498c24274390e800

  • SHA1

    ee8f6dc32a86125675274040167633c540d8c374

  • SHA256

    8d39a31632b14df939cfce19ac0551ee6c2d5012fdc37cb24da716332433224f

  • SHA512

    a8b7bc2e4961697875584f955acce39b0fc70dc4e90b70514d99170659a76e49a604e7b82f653665badd7c05b1a4440331f15a8cd08d5b9638a9fe8765552230

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPn0:P6QFElP6k+MRQMOtEvwDpjBQpVXF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-14_324770e068ff0dc4498c24274390e800_cryptolocker

    • Size

      45KB

    • MD5

      324770e068ff0dc4498c24274390e800

    • SHA1

      ee8f6dc32a86125675274040167633c540d8c374

    • SHA256

      8d39a31632b14df939cfce19ac0551ee6c2d5012fdc37cb24da716332433224f

    • SHA512

      a8b7bc2e4961697875584f955acce39b0fc70dc4e90b70514d99170659a76e49a604e7b82f653665badd7c05b1a4440331f15a8cd08d5b9638a9fe8765552230

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPn0:P6QFElP6k+MRQMOtEvwDpjBQpVXF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks