General

  • Target

    2024-06-12_0be846a35411f9fe2945136f9484ede4_cryptolocker

  • Size

    86KB

  • Sample

    240612-rr6hgsybka

  • MD5

    0be846a35411f9fe2945136f9484ede4

  • SHA1

    5b381ec11e214ee3cee07b6bd496ed79bea2aab1

  • SHA256

    a0af18c1e024f46b3eeaa33c32db7c4b385ff2e209974e6b64f2c62851d0f074

  • SHA512

    d0912689fc39a9304ccec919d220833c19cbe7b1569e94a0e2fcb37fccd17fd577ae07cf52d55ca701eafcf1471ea7248a06488cc0a04eb68829682045ae5431

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+3nB:TCjsIOtEvwDpj5HE/OUHnSMH

Score
10/10

Malware Config

Targets

    • Target

      2024-06-12_0be846a35411f9fe2945136f9484ede4_cryptolocker

    • Size

      86KB

    • MD5

      0be846a35411f9fe2945136f9484ede4

    • SHA1

      5b381ec11e214ee3cee07b6bd496ed79bea2aab1

    • SHA256

      a0af18c1e024f46b3eeaa33c32db7c4b385ff2e209974e6b64f2c62851d0f074

    • SHA512

      d0912689fc39a9304ccec919d220833c19cbe7b1569e94a0e2fcb37fccd17fd577ae07cf52d55ca701eafcf1471ea7248a06488cc0a04eb68829682045ae5431

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+3nB:TCjsIOtEvwDpj5HE/OUHnSMH

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks