General

  • Target

    2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker

  • Size

    86KB

  • Sample

    240521-f4qf9abd73

  • MD5

    cfc69ca5f171f44c6c81200731b390f2

  • SHA1

    a2e5d942bbffba5262d5503e52d2bdff8093d500

  • SHA256

    bb9ff139fa4ce9c4c6a23367af40e239fb95985229533d41a4ab10a8d6c145c5

  • SHA512

    3b9149fed1251b4fba2e3488a64c80fec49efc75fa36c3b9f04a8d904109e1fff33c79b24631fe786a9487564693a27bd94e2afa763c83d58f131b42a6dd733a

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6av:V6a+pOtEvwDpjvpb

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker

    • Size

      86KB

    • MD5

      cfc69ca5f171f44c6c81200731b390f2

    • SHA1

      a2e5d942bbffba5262d5503e52d2bdff8093d500

    • SHA256

      bb9ff139fa4ce9c4c6a23367af40e239fb95985229533d41a4ab10a8d6c145c5

    • SHA512

      3b9149fed1251b4fba2e3488a64c80fec49efc75fa36c3b9f04a8d904109e1fff33c79b24631fe786a9487564693a27bd94e2afa763c83d58f131b42a6dd733a

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6av:V6a+pOtEvwDpjvpb

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks