General

  • Target

    2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker

  • Size

    42KB

  • Sample

    240602-kbt17aga8z

  • MD5

    a5c2773b07129101c436f50006fb376e

  • SHA1

    fc8c864d39f29970441424bd448af047482db900

  • SHA256

    ee7313b5878699219627905ff12566439ca864b7c6a933ed0b1b573935c445da

  • SHA512

    3699e3ae5992c2ac8df3eb573d70067d19410f66d2cf852c48054d1b425a87e1f5bc8ac122b526b650dba584219370ac0c65d7169c20a9698cd4f668b1081c54

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAC:bCDOw9aMDooc+vAqAC

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker

    • Size

      42KB

    • MD5

      a5c2773b07129101c436f50006fb376e

    • SHA1

      fc8c864d39f29970441424bd448af047482db900

    • SHA256

      ee7313b5878699219627905ff12566439ca864b7c6a933ed0b1b573935c445da

    • SHA512

      3699e3ae5992c2ac8df3eb573d70067d19410f66d2cf852c48054d1b425a87e1f5bc8ac122b526b650dba584219370ac0c65d7169c20a9698cd4f668b1081c54

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAC:bCDOw9aMDooc+vAqAC

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks