General

  • Target

    2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker

  • Size

    41KB

  • Sample

    240525-deqdvacc77

  • MD5

    b2c193632dfcb9deef85278af00f50bc

  • SHA1

    48270448673a0678228488415d82c6528ee1bdb3

  • SHA256

    84c758c28c5c0429ae6871022854e32576f443ef230854c546ac8a0943594a77

  • SHA512

    581bd4367f7a83ac51d1c8c6874623172f03213da3b92f1f82b4dc4979c56cd0a5e036daad92d141b3b8f1ee1c34127269c679a5fbf6be99ed4a677ae7999ef7

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7l:bCDOw9aMDooc+vA7l

Score
10/10

Malware Config

Targets

    • Target

      2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker

    • Size

      41KB

    • MD5

      b2c193632dfcb9deef85278af00f50bc

    • SHA1

      48270448673a0678228488415d82c6528ee1bdb3

    • SHA256

      84c758c28c5c0429ae6871022854e32576f443ef230854c546ac8a0943594a77

    • SHA512

      581bd4367f7a83ac51d1c8c6874623172f03213da3b92f1f82b4dc4979c56cd0a5e036daad92d141b3b8f1ee1c34127269c679a5fbf6be99ed4a677ae7999ef7

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7l:bCDOw9aMDooc+vA7l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks