General

  • Target

    2024-06-12_4f0adf6cdb24e29b294440624d3efb17_cryptolocker

  • Size

    87KB

  • Sample

    240612-xfzhpazbmp

  • MD5

    4f0adf6cdb24e29b294440624d3efb17

  • SHA1

    8ce057646913af45ab187b1e3475e2fdb395fc2e

  • SHA256

    06ac3ba2add5f3f12fd08526bc966b3333a0eb13f2904a1d37021c79dd541e95

  • SHA512

    733dade88085d1e29bd074b28e4b79d48f3e8a78334f2cc7e7ecde20ab5ebde92493f42faaad1c08228224a27a023675b59f6d7ced1b2d0ae4afa6dec84d2867

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6al:V6a+pOtEvwDpjvph

Score
10/10

Malware Config

Targets

    • Target

      2024-06-12_4f0adf6cdb24e29b294440624d3efb17_cryptolocker

    • Size

      87KB

    • MD5

      4f0adf6cdb24e29b294440624d3efb17

    • SHA1

      8ce057646913af45ab187b1e3475e2fdb395fc2e

    • SHA256

      06ac3ba2add5f3f12fd08526bc966b3333a0eb13f2904a1d37021c79dd541e95

    • SHA512

      733dade88085d1e29bd074b28e4b79d48f3e8a78334f2cc7e7ecde20ab5ebde92493f42faaad1c08228224a27a023675b59f6d7ced1b2d0ae4afa6dec84d2867

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6al:V6a+pOtEvwDpjvph

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks