General

  • Target

    2024-05-22_92ab78ef918370575998deebbc53d702_cryptolocker

  • Size

    42KB

  • Sample

    240522-c591hahh6x

  • MD5

    92ab78ef918370575998deebbc53d702

  • SHA1

    2e7a88575bcf1935a968e64c755ede3d82d91407

  • SHA256

    4f531a11dd6c26c1db20dca294963d4ab652ecb610ba27985395cd5175d2de5f

  • SHA512

    4b1751d292c97abbd60d32266595782d42e32cf3cf3c2be78f135c7ca546321d65697aa4eab88d3975e9d0c3393eefe116cb0a19c553fb25514e46918f81cc80

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAc:bCDOw9aMDooc+vAc

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_92ab78ef918370575998deebbc53d702_cryptolocker

    • Size

      42KB

    • MD5

      92ab78ef918370575998deebbc53d702

    • SHA1

      2e7a88575bcf1935a968e64c755ede3d82d91407

    • SHA256

      4f531a11dd6c26c1db20dca294963d4ab652ecb610ba27985395cd5175d2de5f

    • SHA512

      4b1751d292c97abbd60d32266595782d42e32cf3cf3c2be78f135c7ca546321d65697aa4eab88d3975e9d0c3393eefe116cb0a19c553fb25514e46918f81cc80

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAc:bCDOw9aMDooc+vAc

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks