General

  • Target

    2024-06-06_8875a2855db2b70832147e2f8b114f93_cryptolocker

  • Size

    66KB

  • Sample

    240606-1cnhssdd62

  • MD5

    8875a2855db2b70832147e2f8b114f93

  • SHA1

    9ac0ad0ad1582e5b6ecc899f94f137cfc311f693

  • SHA256

    cb59e9bdfe9219454e619727e5880dd23f1dec2c94601148e32d7471e3182419

  • SHA512

    bd0919ea37213ad5d8a9115314894db727f783da4ee6df82df39d14c623b8ae1d4157fc31acd1981a51cebbe55e1490adfd8ec3307ad11e6b8ea34c85f05c4dc

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijf:BbdDmjr+OtEvwDpjM8e

Score
10/10

Malware Config

Targets

    • Target

      2024-06-06_8875a2855db2b70832147e2f8b114f93_cryptolocker

    • Size

      66KB

    • MD5

      8875a2855db2b70832147e2f8b114f93

    • SHA1

      9ac0ad0ad1582e5b6ecc899f94f137cfc311f693

    • SHA256

      cb59e9bdfe9219454e619727e5880dd23f1dec2c94601148e32d7471e3182419

    • SHA512

      bd0919ea37213ad5d8a9115314894db727f783da4ee6df82df39d14c623b8ae1d4157fc31acd1981a51cebbe55e1490adfd8ec3307ad11e6b8ea34c85f05c4dc

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijf:BbdDmjr+OtEvwDpjM8e

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks