General

  • Target

    2024-05-24_f0eb499f27df57f22b1af4eca8d9f855_cryptolocker

  • Size

    33KB

  • Sample

    240524-es3rrscg5x

  • MD5

    f0eb499f27df57f22b1af4eca8d9f855

  • SHA1

    bf36895b1f8cd2cb6eb968b05631f312e625163c

  • SHA256

    2f60f1bd45e6abfbaf42e3f1e0c5e99c36a48ca9b860f32c9df8ef1d3b38c587

  • SHA512

    e09cdf6eaa910421e1cc1b75a73d4fcf07085c9da43623bad22973e08fc5439a12c17e492e8b6371b76e0963c701c279937635d2e87e4e97a81f38ff96586c5c

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7dX/:bAvJCYOOvbRPDEgXRcJB

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_f0eb499f27df57f22b1af4eca8d9f855_cryptolocker

    • Size

      33KB

    • MD5

      f0eb499f27df57f22b1af4eca8d9f855

    • SHA1

      bf36895b1f8cd2cb6eb968b05631f312e625163c

    • SHA256

      2f60f1bd45e6abfbaf42e3f1e0c5e99c36a48ca9b860f32c9df8ef1d3b38c587

    • SHA512

      e09cdf6eaa910421e1cc1b75a73d4fcf07085c9da43623bad22973e08fc5439a12c17e492e8b6371b76e0963c701c279937635d2e87e4e97a81f38ff96586c5c

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7dX/:bAvJCYOOvbRPDEgXRcJB

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks