General

  • Target

    2024-05-22_7e4b3258d97c429d7d5abc580e1458cb_cryptolocker

  • Size

    77KB

  • Sample

    240522-aw3hysfa5v

  • MD5

    7e4b3258d97c429d7d5abc580e1458cb

  • SHA1

    bdf03f99f69c69151552b6717789d97e2762f1bb

  • SHA256

    77c838eb75f18fc94df0a28313111855527590dcbae043a7db8e12cbc77eb845

  • SHA512

    3a31b7af2fd7be6477c53d50e2653fec0b8d2ecc38603aee594da558478e918c177e6f5a14195912b8811931685ff512290cfb828c5132060a63b6aa1f2efcaa

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufZ:vCjsIOtEvwDpj5H9YvQd2N

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_7e4b3258d97c429d7d5abc580e1458cb_cryptolocker

    • Size

      77KB

    • MD5

      7e4b3258d97c429d7d5abc580e1458cb

    • SHA1

      bdf03f99f69c69151552b6717789d97e2762f1bb

    • SHA256

      77c838eb75f18fc94df0a28313111855527590dcbae043a7db8e12cbc77eb845

    • SHA512

      3a31b7af2fd7be6477c53d50e2653fec0b8d2ecc38603aee594da558478e918c177e6f5a14195912b8811931685ff512290cfb828c5132060a63b6aa1f2efcaa

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufZ:vCjsIOtEvwDpj5H9YvQd2N

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks