General

  • Target

    2024-05-21_5e8da3cf68558e2cc1c70d4133b25bea_cryptolocker

  • Size

    41KB

  • Sample

    240521-rsd5mahb8s

  • MD5

    5e8da3cf68558e2cc1c70d4133b25bea

  • SHA1

    613917fd16dc73a9bec8c3a3a8132cb49bfdc350

  • SHA256

    17c7c9f68ffa309f4cef85738f9ee8d54e417e8fcd59b94555ac938ee80b1082

  • SHA512

    ba3dc30a9cb3a903870f1705a1269896f8c5746af06ce9bb75de6121628157486dfadbe0436f20027c7466b29ce3abfc13fe61c28c28967198984bfbdf4f5b71

  • SSDEEP

    768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwp:bA6YcA/X6G0W143Qp

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_5e8da3cf68558e2cc1c70d4133b25bea_cryptolocker

    • Size

      41KB

    • MD5

      5e8da3cf68558e2cc1c70d4133b25bea

    • SHA1

      613917fd16dc73a9bec8c3a3a8132cb49bfdc350

    • SHA256

      17c7c9f68ffa309f4cef85738f9ee8d54e417e8fcd59b94555ac938ee80b1082

    • SHA512

      ba3dc30a9cb3a903870f1705a1269896f8c5746af06ce9bb75de6121628157486dfadbe0436f20027c7466b29ce3abfc13fe61c28c28967198984bfbdf4f5b71

    • SSDEEP

      768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwp:bA6YcA/X6G0W143Qp

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks