General

  • Target

    2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker

  • Size

    87KB

  • Sample

    240529-zf2ddsaa42

  • MD5

    def493811af6a8e009fdff5ae7b2bdad

  • SHA1

    8d7ab08519ccf3332898653af4c5147f2a9ff0d8

  • SHA256

    c905576509ae01d874a0d2db6fdc6aacfc0b5e551fa1c7653540013b99218b69

  • SHA512

    36684b5910100ba67e9c9997a958099939c0c61a662b93676377f249796f989784a7dd3b793fe594517f895b4ebe6a22bceeecd5ba4e05e41a8706bb55fa94ec

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aF:V6a+pOtEvwDpjvph

Score
10/10

Malware Config

Targets

    • Target

      2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker

    • Size

      87KB

    • MD5

      def493811af6a8e009fdff5ae7b2bdad

    • SHA1

      8d7ab08519ccf3332898653af4c5147f2a9ff0d8

    • SHA256

      c905576509ae01d874a0d2db6fdc6aacfc0b5e551fa1c7653540013b99218b69

    • SHA512

      36684b5910100ba67e9c9997a958099939c0c61a662b93676377f249796f989784a7dd3b793fe594517f895b4ebe6a22bceeecd5ba4e05e41a8706bb55fa94ec

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aF:V6a+pOtEvwDpjvph

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks