General

  • Target

    2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker

  • Size

    38KB

  • Sample

    240524-p242asde73

  • MD5

    b870226cafda7f850a72c2941a78578c

  • SHA1

    91bb9039a81cbe845d79ecf90750f527293a6006

  • SHA256

    8c0edc4c3ef3c165929f47494c2ce9f98a3089a7b147690d6853882422816348

  • SHA512

    ad58a7c8976ee90e656529a97fd4145684b8415c75dca7ac8019dbdf657b813e92f4ec20394aa9abfc6d3e1492f05f2db8fa7ef18efaf6ece79d94221f65a819

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpg:bc/y2lLRU6zA6lpg

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker

    • Size

      38KB

    • MD5

      b870226cafda7f850a72c2941a78578c

    • SHA1

      91bb9039a81cbe845d79ecf90750f527293a6006

    • SHA256

      8c0edc4c3ef3c165929f47494c2ce9f98a3089a7b147690d6853882422816348

    • SHA512

      ad58a7c8976ee90e656529a97fd4145684b8415c75dca7ac8019dbdf657b813e92f4ec20394aa9abfc6d3e1492f05f2db8fa7ef18efaf6ece79d94221f65a819

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpg:bc/y2lLRU6zA6lpg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks