General

  • Target

    2024-06-01_be988c523a322e708b7b8a94952ed086_cryptolocker

  • Size

    52KB

  • Sample

    240601-ps6hrsce5t

  • MD5

    be988c523a322e708b7b8a94952ed086

  • SHA1

    723320867aadb0eb84e7d5f17e45d5c8bbccb9eb

  • SHA256

    8dc997268d6263b38f40e09501ac1f2663eebe0e318cae3043c8edc38fdeeff3

  • SHA512

    63bf88f0342fd4ebd45cfb08a92a2cb86b3a1bcbbad4a29d6edaee2562110731f9e297e6cc32b7802e31e003c1743e16246578e9c90de2d4f5a252c6d0e8f4b1

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyPh:6j+1NMOtEvwDpjr8hhXy+iyy5

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_be988c523a322e708b7b8a94952ed086_cryptolocker

    • Size

      52KB

    • MD5

      be988c523a322e708b7b8a94952ed086

    • SHA1

      723320867aadb0eb84e7d5f17e45d5c8bbccb9eb

    • SHA256

      8dc997268d6263b38f40e09501ac1f2663eebe0e318cae3043c8edc38fdeeff3

    • SHA512

      63bf88f0342fd4ebd45cfb08a92a2cb86b3a1bcbbad4a29d6edaee2562110731f9e297e6cc32b7802e31e003c1743e16246578e9c90de2d4f5a252c6d0e8f4b1

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyPh:6j+1NMOtEvwDpjr8hhXy+iyy5

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks