General

  • Target

    2024-06-11_051fbed7874bcf67eecff20606eda2e6_cryptolocker

  • Size

    79KB

  • Sample

    240611-t8xysatdng

  • MD5

    051fbed7874bcf67eecff20606eda2e6

  • SHA1

    678450538ce4a6090479f0aeb039677157885205

  • SHA256

    6ba39752b30bfc3c7b20004ad9912e3538621e3b1cd6189d76c6a47618dd63eb

  • SHA512

    9c89f1dc627ad8bc5513822d9944c6068197f0711a1b8be7d5cb3e81e2a3117ab1a0eb54c0cf4061b7496c9a687990f28dbd80d749eacd7ad5dde7d2dc87a7f6

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufh:vCjsIOtEvwDpj5H9YvQd2l

Score
10/10

Malware Config

Targets

    • Target

      2024-06-11_051fbed7874bcf67eecff20606eda2e6_cryptolocker

    • Size

      79KB

    • MD5

      051fbed7874bcf67eecff20606eda2e6

    • SHA1

      678450538ce4a6090479f0aeb039677157885205

    • SHA256

      6ba39752b30bfc3c7b20004ad9912e3538621e3b1cd6189d76c6a47618dd63eb

    • SHA512

      9c89f1dc627ad8bc5513822d9944c6068197f0711a1b8be7d5cb3e81e2a3117ab1a0eb54c0cf4061b7496c9a687990f28dbd80d749eacd7ad5dde7d2dc87a7f6

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufh:vCjsIOtEvwDpj5H9YvQd2l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks