General

  • Target

    2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker

  • Size

    43KB

  • Sample

    240521-zmbfjsab2y

  • MD5

    5a119ab2429a5789adcca9dd75bcbced

  • SHA1

    1002b36f3972a064c7c4cfdd702e6265b9aea29c

  • SHA256

    4d50cd524c8bf059b2da1d3bf5ab18481bbf9cfa30b039863898e8d4ca007954

  • SHA512

    927356bdf7f631086274bfa4157dd3195600bc714ca46838c23888cf6e29983e12ff1422cbe4d7151af6a8f03a740e12a79e62fff43dfef1591a9aca4281d645

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0A:bCDOw9aMDooc+vAls

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker

    • Size

      43KB

    • MD5

      5a119ab2429a5789adcca9dd75bcbced

    • SHA1

      1002b36f3972a064c7c4cfdd702e6265b9aea29c

    • SHA256

      4d50cd524c8bf059b2da1d3bf5ab18481bbf9cfa30b039863898e8d4ca007954

    • SHA512

      927356bdf7f631086274bfa4157dd3195600bc714ca46838c23888cf6e29983e12ff1422cbe4d7151af6a8f03a740e12a79e62fff43dfef1591a9aca4281d645

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0A:bCDOw9aMDooc+vAls

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks