General

  • Target

    2024-05-27_e86563b09645ddb7464fccb7d1fdd390_cryptolocker

  • Size

    41KB

  • Sample

    240527-xeqt6adg5z

  • MD5

    e86563b09645ddb7464fccb7d1fdd390

  • SHA1

    b15c69755a89ef44e74e68642b7186fc1acb5629

  • SHA256

    aaaa3b43426637ca9cdc30e5066061264170cc93f5923d462addc1179877b7f0

  • SHA512

    66d767650022bcbb9e1f5dae2e0e8fcf4279ce78547a9bdde712f1e6000732393d5b6e94a5392abd738e7a0038769853e8948a4b6386bab78ad1de4158901faf

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyv7:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZ67

Score
10/10

Malware Config

Targets

    • Target

      2024-05-27_e86563b09645ddb7464fccb7d1fdd390_cryptolocker

    • Size

      41KB

    • MD5

      e86563b09645ddb7464fccb7d1fdd390

    • SHA1

      b15c69755a89ef44e74e68642b7186fc1acb5629

    • SHA256

      aaaa3b43426637ca9cdc30e5066061264170cc93f5923d462addc1179877b7f0

    • SHA512

      66d767650022bcbb9e1f5dae2e0e8fcf4279ce78547a9bdde712f1e6000732393d5b6e94a5392abd738e7a0038769853e8948a4b6386bab78ad1de4158901faf

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyv7:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZ67

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks