General

  • Target

    2024-06-03_d1a156712c705331878c575aaa8a467e_cryptolocker

  • Size

    76KB

  • Sample

    240603-jmkffshf58

  • MD5

    d1a156712c705331878c575aaa8a467e

  • SHA1

    d76920a769b32f455b5c65b1219b255897e711c1

  • SHA256

    f1aaf7f62a1c972c8191287678d719b13fa5bdb5d6340f098c0805833b26fa06

  • SHA512

    b22740c4a8b48eba9c9cd70d697265bd806f10d36eb9319d625dcf51981ba42d5dda10dff091449be592b4cf339c3075f87b4f936a9ef0d63cee26252132009b

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsom:X6a+SOtEvwDpjBZYvQd2I

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_d1a156712c705331878c575aaa8a467e_cryptolocker

    • Size

      76KB

    • MD5

      d1a156712c705331878c575aaa8a467e

    • SHA1

      d76920a769b32f455b5c65b1219b255897e711c1

    • SHA256

      f1aaf7f62a1c972c8191287678d719b13fa5bdb5d6340f098c0805833b26fa06

    • SHA512

      b22740c4a8b48eba9c9cd70d697265bd806f10d36eb9319d625dcf51981ba42d5dda10dff091449be592b4cf339c3075f87b4f936a9ef0d63cee26252132009b

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsom:X6a+SOtEvwDpjBZYvQd2I

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks