General

  • Target

    2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker

  • Size

    64KB

  • Sample

    240521-x5cp8afh33

  • MD5

    2a8266c5251598d14a57dad9a69d5dee

  • SHA1

    69b63824244c26d5834843ac93f6187a8ea16775

  • SHA256

    030265b0ed84d026b8f62d77d83a15df60c1af08fd98674a2888733f1ca4d126

  • SHA512

    1762d2a703f42718541a8e4a3cae4f9ddd04c3dd6c04e58f1a9bfe7fb36e7177f1987f041f8279306da84a78ee274cbfe5e9d6417414fa9a37e2ed6bab925d83

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiQ:BbdDmjr+OtEvwDpjM8p

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker

    • Size

      64KB

    • MD5

      2a8266c5251598d14a57dad9a69d5dee

    • SHA1

      69b63824244c26d5834843ac93f6187a8ea16775

    • SHA256

      030265b0ed84d026b8f62d77d83a15df60c1af08fd98674a2888733f1ca4d126

    • SHA512

      1762d2a703f42718541a8e4a3cae4f9ddd04c3dd6c04e58f1a9bfe7fb36e7177f1987f041f8279306da84a78ee274cbfe5e9d6417414fa9a37e2ed6bab925d83

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiQ:BbdDmjr+OtEvwDpjM8p

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks