General

  • Target

    2024-06-02_ccf8021528a0b43e6a3635e8a61cf4b7_cryptolocker

  • Size

    64KB

  • Sample

    240602-egqytsaf75

  • MD5

    ccf8021528a0b43e6a3635e8a61cf4b7

  • SHA1

    b4672a613638e02c8c2ac8e2c54fd4397e50d9d9

  • SHA256

    410f2b518230a14fceff48fd08b0c63ebab4c415d1f5baf6f76e240c2cdea841

  • SHA512

    d46c1ae3dbf08db710b8d8463289a641de30c89941ce0cd62196b87471588275879782647fc320dad1fbda28900275902a447a793bd977bc8c1042b12b1e8fc2

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi8:BbdDmjr+OtEvwDpjM8t

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_ccf8021528a0b43e6a3635e8a61cf4b7_cryptolocker

    • Size

      64KB

    • MD5

      ccf8021528a0b43e6a3635e8a61cf4b7

    • SHA1

      b4672a613638e02c8c2ac8e2c54fd4397e50d9d9

    • SHA256

      410f2b518230a14fceff48fd08b0c63ebab4c415d1f5baf6f76e240c2cdea841

    • SHA512

      d46c1ae3dbf08db710b8d8463289a641de30c89941ce0cd62196b87471588275879782647fc320dad1fbda28900275902a447a793bd977bc8c1042b12b1e8fc2

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi8:BbdDmjr+OtEvwDpjM8t

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks