General

  • Target

    2024-06-10_5f61438de10836bc49bb2306afc32cef_cryptolocker

  • Size

    31KB

  • Sample

    240610-hvslcsde8w

  • MD5

    5f61438de10836bc49bb2306afc32cef

  • SHA1

    70561041a97db3aa16d952da9c908d03e06f9c1c

  • SHA256

    7507973198634610eddcbb2b5f50e95099edb275b002391af19f992ab2a89f6b

  • SHA512

    2a62d1b32014b15fbf840cee5263ee92c846f058ddcb63dd24e2eb37673e8531e3f15b75289158491131b542746014fd140dcea4c7b6e31e929e3a502a110c59

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdj:bAvJCYOOvbRPDEgXRcJh

Score
10/10

Malware Config

Targets

    • Target

      2024-06-10_5f61438de10836bc49bb2306afc32cef_cryptolocker

    • Size

      31KB

    • MD5

      5f61438de10836bc49bb2306afc32cef

    • SHA1

      70561041a97db3aa16d952da9c908d03e06f9c1c

    • SHA256

      7507973198634610eddcbb2b5f50e95099edb275b002391af19f992ab2a89f6b

    • SHA512

      2a62d1b32014b15fbf840cee5263ee92c846f058ddcb63dd24e2eb37673e8531e3f15b75289158491131b542746014fd140dcea4c7b6e31e929e3a502a110c59

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdj:bAvJCYOOvbRPDEgXRcJh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks