General

  • Target

    2024-05-23_ca9e151cde6e45cc01acf44217247e4b_cryptolocker

  • Size

    44KB

  • Sample

    240523-jd7jmahe87

  • MD5

    ca9e151cde6e45cc01acf44217247e4b

  • SHA1

    abbd2f40a97f9e7552df79c3fa44298279b6164f

  • SHA256

    9ee925563205ed3175b68cc78f54a5ca250a0456657cdaf884e227b10a7a21f5

  • SHA512

    07413bf875782303b87634959226d14893f77d2a3301ca11cb29ab84e26cb9e5f40505d64f4d40c1c702f2e9eed68af09a111ca976158dd3db221b8eb5bb7a62

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhj:6j+1NMOtEvwDpjrRr5

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_ca9e151cde6e45cc01acf44217247e4b_cryptolocker

    • Size

      44KB

    • MD5

      ca9e151cde6e45cc01acf44217247e4b

    • SHA1

      abbd2f40a97f9e7552df79c3fa44298279b6164f

    • SHA256

      9ee925563205ed3175b68cc78f54a5ca250a0456657cdaf884e227b10a7a21f5

    • SHA512

      07413bf875782303b87634959226d14893f77d2a3301ca11cb29ab84e26cb9e5f40505d64f4d40c1c702f2e9eed68af09a111ca976158dd3db221b8eb5bb7a62

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhj:6j+1NMOtEvwDpjrRr5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks