General

  • Target

    2024-05-24_8ed382828a764feeace383bb98fa323b_cryptolocker

  • Size

    41KB

  • Sample

    240524-qpxl5afg83

  • MD5

    8ed382828a764feeace383bb98fa323b

  • SHA1

    3e581274c995e363a8567b1f7d5d39ecad1fe44b

  • SHA256

    7c0811237e28b22a087fee90bd86fbb4d023e556b827e5eff95e53410c307c27

  • SHA512

    43b3874a9ab16b139bdd96d07dca7d5678031622154cc08583d1f9a9d556da50ba6240cd6c44c17b361100fd95d632363ad497bbc85acc1fbb3017320301e09d

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7s:bCDOw9aMDooc+vA7s

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_8ed382828a764feeace383bb98fa323b_cryptolocker

    • Size

      41KB

    • MD5

      8ed382828a764feeace383bb98fa323b

    • SHA1

      3e581274c995e363a8567b1f7d5d39ecad1fe44b

    • SHA256

      7c0811237e28b22a087fee90bd86fbb4d023e556b827e5eff95e53410c307c27

    • SHA512

      43b3874a9ab16b139bdd96d07dca7d5678031622154cc08583d1f9a9d556da50ba6240cd6c44c17b361100fd95d632363ad497bbc85acc1fbb3017320301e09d

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7s:bCDOw9aMDooc+vA7s

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks