General

  • Target

    2024-06-05_b1b41e7f96c1251df4f72f25b08de746_cryptolocker

  • Size

    42KB

  • Sample

    240606-arw6dade88

  • MD5

    b1b41e7f96c1251df4f72f25b08de746

  • SHA1

    2e95190a3f0793c18266c934fcadd4235416445d

  • SHA256

    28e09d837b577c3832dea83a3cd53f0effdfc0698f5abae347479998ab8f851d

  • SHA512

    05b39f059c4aa09143d2732e95256345263988ca7538b5c00fed6f8d2d38f12dc0f4dbd7da39c029e972899cffb38bfc57244f232125b7a6ce551f4d96671d8d

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAA:bCDOw9aMDooc+vAqAA

Score
10/10

Malware Config

Targets

    • Target

      2024-06-05_b1b41e7f96c1251df4f72f25b08de746_cryptolocker

    • Size

      42KB

    • MD5

      b1b41e7f96c1251df4f72f25b08de746

    • SHA1

      2e95190a3f0793c18266c934fcadd4235416445d

    • SHA256

      28e09d837b577c3832dea83a3cd53f0effdfc0698f5abae347479998ab8f851d

    • SHA512

      05b39f059c4aa09143d2732e95256345263988ca7538b5c00fed6f8d2d38f12dc0f4dbd7da39c029e972899cffb38bfc57244f232125b7a6ce551f4d96671d8d

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAA:bCDOw9aMDooc+vAqAA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks