General

  • Target

    2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker

  • Size

    47KB

  • Sample

    240602-g5hcpseb84

  • MD5

    10343e6a06d28333fb05faa7c70c5fe7

  • SHA1

    03374bea38c647b74329338e4b25ce419ddc4e92

  • SHA256

    6780139e96a2272a36678406918e330dcef203afaace35b30557d252635340a6

  • SHA512

    ce17dc1c72352552f22b036a9819e2ac2995b0809a521d4d433adc34a2f633b14319c20429e87b42710c15d1bdf71dcc4c77551253477fcaac0083ecb9bcf541

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhL:xj+VGMOtEvwDpjy+TRhL

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker

    • Size

      47KB

    • MD5

      10343e6a06d28333fb05faa7c70c5fe7

    • SHA1

      03374bea38c647b74329338e4b25ce419ddc4e92

    • SHA256

      6780139e96a2272a36678406918e330dcef203afaace35b30557d252635340a6

    • SHA512

      ce17dc1c72352552f22b036a9819e2ac2995b0809a521d4d433adc34a2f633b14319c20429e87b42710c15d1bdf71dcc4c77551253477fcaac0083ecb9bcf541

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhL:xj+VGMOtEvwDpjy+TRhL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks