General

  • Target

    2024-06-04_58e128bc3857793597ee8296b1de0190_cryptolocker

  • Size

    44KB

  • Sample

    240604-facy3aea28

  • MD5

    58e128bc3857793597ee8296b1de0190

  • SHA1

    68249d17f818d3b8c43eb5e1f06cb8098bf872b2

  • SHA256

    a93747f0531353b66a28431f63231cd43c720389886733a5e250fb30656b7600

  • SHA512

    c251b92d38d648c10d5cf46746c24f3a4d7edb8334a86322050be99bdf1211c2e972fa69a430901d5641c6f1f7f3ddefc38ce00e05cca700f627c8f93c0e6141

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAyd1/:bCDOw9aMDooc+vAyX

Score
10/10

Malware Config

Targets

    • Target

      2024-06-04_58e128bc3857793597ee8296b1de0190_cryptolocker

    • Size

      44KB

    • MD5

      58e128bc3857793597ee8296b1de0190

    • SHA1

      68249d17f818d3b8c43eb5e1f06cb8098bf872b2

    • SHA256

      a93747f0531353b66a28431f63231cd43c720389886733a5e250fb30656b7600

    • SHA512

      c251b92d38d648c10d5cf46746c24f3a4d7edb8334a86322050be99bdf1211c2e972fa69a430901d5641c6f1f7f3ddefc38ce00e05cca700f627c8f93c0e6141

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAyd1/:bCDOw9aMDooc+vAyX

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks