General

  • Target

    2024-05-26_89c74df34772de1cb6fc16b79bbbaa01_cryptolocker

  • Size

    48KB

  • Sample

    240526-xqfhkage6t

  • MD5

    89c74df34772de1cb6fc16b79bbbaa01

  • SHA1

    8fc5f4fa302147c88618798d26f7496e088aeb22

  • SHA256

    bcf67d327bb4cf2871b5a18f3e4aec798aa192e60f8ee4c70fbdb3c9eb3b5262

  • SHA512

    cbe049fe3365193334a5698ce7285d90a87f273f86da8cfd5ad3c1ea0581486599c7e712e6ce6200695b4ff977afcb6ab19a56ce35d1411b540940cf5426899e

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFW0R:79mqyNhQMOtEvwDpjBzck1W40R

Score
10/10

Malware Config

Targets

    • Target

      2024-05-26_89c74df34772de1cb6fc16b79bbbaa01_cryptolocker

    • Size

      48KB

    • MD5

      89c74df34772de1cb6fc16b79bbbaa01

    • SHA1

      8fc5f4fa302147c88618798d26f7496e088aeb22

    • SHA256

      bcf67d327bb4cf2871b5a18f3e4aec798aa192e60f8ee4c70fbdb3c9eb3b5262

    • SHA512

      cbe049fe3365193334a5698ce7285d90a87f273f86da8cfd5ad3c1ea0581486599c7e712e6ce6200695b4ff977afcb6ab19a56ce35d1411b540940cf5426899e

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFW0R:79mqyNhQMOtEvwDpjBzck1W40R

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks