General

  • Target

    2024-06-12_11ad3896139be0cb5dadfff6f788fda7_cryptolocker

  • Size

    45KB

  • Sample

    240612-ssshpazdne

  • MD5

    11ad3896139be0cb5dadfff6f788fda7

  • SHA1

    ec59cafdf7e6f7006bb23403099d97e0a55a1d54

  • SHA256

    e0eb65c978f04aff10972c99d166b47d7796b568ac1943545b81e637702333f0

  • SHA512

    ad2183083824a6008a3ee9de14eca140d178a4d54b3c155e525b89dd02a02807ff17f3d0166677603021c0f225d966f2a6c87cd481d3e83e43d84fe33c8a247c

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDb:6j+1NMOtEvwDpjrRrH

Score
10/10

Malware Config

Targets

    • Target

      2024-06-12_11ad3896139be0cb5dadfff6f788fda7_cryptolocker

    • Size

      45KB

    • MD5

      11ad3896139be0cb5dadfff6f788fda7

    • SHA1

      ec59cafdf7e6f7006bb23403099d97e0a55a1d54

    • SHA256

      e0eb65c978f04aff10972c99d166b47d7796b568ac1943545b81e637702333f0

    • SHA512

      ad2183083824a6008a3ee9de14eca140d178a4d54b3c155e525b89dd02a02807ff17f3d0166677603021c0f225d966f2a6c87cd481d3e83e43d84fe33c8a247c

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDb:6j+1NMOtEvwDpjrRrH

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks