General

  • Target

    2024-05-27_222652fcaefb01b206ee441deda1d067_cryptolocker

  • Size

    40KB

  • Sample

    240527-z9kmqsbf78

  • MD5

    222652fcaefb01b206ee441deda1d067

  • SHA1

    e7bc47738704de219d0e6622b9d1efeb2c2eba08

  • SHA256

    d343832e46d112249d76aa440370531e1e6750f199edc361769e3df69527180e

  • SHA512

    7d2e9625563635e63a0c264732b5738d176bb69b697392460d1531c97f29883205603cb1a4d2bb5a4b6c080fcc86bced800c8238799a29bfb92ff9326f01b252

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDky:ZzFbxmLPWQMOtEvwDpjLeJAsKcF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-27_222652fcaefb01b206ee441deda1d067_cryptolocker

    • Size

      40KB

    • MD5

      222652fcaefb01b206ee441deda1d067

    • SHA1

      e7bc47738704de219d0e6622b9d1efeb2c2eba08

    • SHA256

      d343832e46d112249d76aa440370531e1e6750f199edc361769e3df69527180e

    • SHA512

      7d2e9625563635e63a0c264732b5738d176bb69b697392460d1531c97f29883205603cb1a4d2bb5a4b6c080fcc86bced800c8238799a29bfb92ff9326f01b252

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDky:ZzFbxmLPWQMOtEvwDpjLeJAsKcF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks