General

  • Target

    2024-05-21_d93a95010013c7cef696fe44387a3b1a_cryptolocker

  • Size

    64KB

  • Sample

    240521-tgz9tsbc7s

  • MD5

    d93a95010013c7cef696fe44387a3b1a

  • SHA1

    b0b1bf25f5f3a3be54f154b8a0cd2bc717137fcd

  • SHA256

    a4e0930b911249f892b3f55621c019450a9729d6b9192066544b29b51f3acd67

  • SHA512

    30e4041bd33b3884c40a25ba817a100122993be9943f406e0bef0a4d0a39a8832158f123e0df54dd97feb1dbe85a0f577466db689dab75385267883f26f8b1d5

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYh:TCjsIOtEvwDpj5HE/OUHnSMa

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_d93a95010013c7cef696fe44387a3b1a_cryptolocker

    • Size

      64KB

    • MD5

      d93a95010013c7cef696fe44387a3b1a

    • SHA1

      b0b1bf25f5f3a3be54f154b8a0cd2bc717137fcd

    • SHA256

      a4e0930b911249f892b3f55621c019450a9729d6b9192066544b29b51f3acd67

    • SHA512

      30e4041bd33b3884c40a25ba817a100122993be9943f406e0bef0a4d0a39a8832158f123e0df54dd97feb1dbe85a0f577466db689dab75385267883f26f8b1d5

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYh:TCjsIOtEvwDpj5HE/OUHnSMa

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks