General

  • Target

    2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker

  • Size

    54KB

  • Sample

    240517-v9jyzsah4v

  • MD5

    32619171aa8496f5cfc8295ad61314a5

  • SHA1

    000695be90ec9855155cca957e953b3834232429

  • SHA256

    7f9e39400a39272158bca9e94380ebfb373a43c63ccef2f4a929f0a661a52cc4

  • SHA512

    9501413b4c148e8adebf437917befbf63f4155dfb48f9e40d4d6e07cce47456e1fe82defda00af3c69e9c223ed8a90215b0d5e362242d51dd5f07f69397aba98

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6i:bc/y2lm6iH/NLp17zrV9g

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker

    • Size

      54KB

    • MD5

      32619171aa8496f5cfc8295ad61314a5

    • SHA1

      000695be90ec9855155cca957e953b3834232429

    • SHA256

      7f9e39400a39272158bca9e94380ebfb373a43c63ccef2f4a929f0a661a52cc4

    • SHA512

      9501413b4c148e8adebf437917befbf63f4155dfb48f9e40d4d6e07cce47456e1fe82defda00af3c69e9c223ed8a90215b0d5e362242d51dd5f07f69397aba98

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6i:bc/y2lm6iH/NLp17zrV9g

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks