General

  • Target

    2024-05-26_bde077bd8a0fa2a268169dc9dec0c4d6_cryptolocker

  • Size

    38KB

  • Sample

    240526-efvkmadh9y

  • MD5

    bde077bd8a0fa2a268169dc9dec0c4d6

  • SHA1

    bd8ebac4222bdd1c222d60830039d15dd7b18d24

  • SHA256

    b8e62f9a9d40c09a21b8c29e6f3b68f7e9f875fa3e4159fa8be52b1de92a82ae

  • SHA512

    a2d8faef889dbda8b05066a14a11287bf5cb59eab49f327d6f09f5dd6f61c1a679ee49622bc09391801bbd95a411bfaa0da5c209ddeefcdf68d6d85ce61493c4

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZCb9q8IujdxNn7z:b/yC4GyNM01GuQMNXw2PSj1Pqq8Bxz

Score
10/10

Malware Config

Targets

    • Target

      2024-05-26_bde077bd8a0fa2a268169dc9dec0c4d6_cryptolocker

    • Size

      38KB

    • MD5

      bde077bd8a0fa2a268169dc9dec0c4d6

    • SHA1

      bd8ebac4222bdd1c222d60830039d15dd7b18d24

    • SHA256

      b8e62f9a9d40c09a21b8c29e6f3b68f7e9f875fa3e4159fa8be52b1de92a82ae

    • SHA512

      a2d8faef889dbda8b05066a14a11287bf5cb59eab49f327d6f09f5dd6f61c1a679ee49622bc09391801bbd95a411bfaa0da5c209ddeefcdf68d6d85ce61493c4

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZCb9q8IujdxNn7z:b/yC4GyNM01GuQMNXw2PSj1Pqq8Bxz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks