General

  • Target

    2024-05-28_94df3fc2198eca16168743edeabe92cb_cryptolocker

  • Size

    47KB

  • Sample

    240528-eh1jnadh4t

  • MD5

    94df3fc2198eca16168743edeabe92cb

  • SHA1

    499be468f514b6ea6d103b971a684d6aae7f93f3

  • SHA256

    38ec56d5ba7f54489e6c656a0e6f55866e0c490ece41575f18ac46d8b05c6bc7

  • SHA512

    f89ae296ab36e82a1452541c1a9602d4927ba4cf64dba2ef5a0f780e6b7564bee2287ee8ee59188ba04c284a9e3ae5f990b8cfd347c0102fa3b21fbf8c9d8f6a

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2V9:79inqyNR/QtOOtEvwDpjBKccJVODvy3M

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_94df3fc2198eca16168743edeabe92cb_cryptolocker

    • Size

      47KB

    • MD5

      94df3fc2198eca16168743edeabe92cb

    • SHA1

      499be468f514b6ea6d103b971a684d6aae7f93f3

    • SHA256

      38ec56d5ba7f54489e6c656a0e6f55866e0c490ece41575f18ac46d8b05c6bc7

    • SHA512

      f89ae296ab36e82a1452541c1a9602d4927ba4cf64dba2ef5a0f780e6b7564bee2287ee8ee59188ba04c284a9e3ae5f990b8cfd347c0102fa3b21fbf8c9d8f6a

    • SSDEEP

      384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2V9:79inqyNR/QtOOtEvwDpjBKccJVODvy3M

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks