General

  • Target

    2024-06-13_6991f83afc6547f2597e8c3cea0d0e4e_cryptolocker

  • Size

    34KB

  • Sample

    240613-by72wszanb

  • MD5

    6991f83afc6547f2597e8c3cea0d0e4e

  • SHA1

    b09c986f25996a429eae00fbd2e2301bb5a24fe0

  • SHA256

    c0ab0c81c984f3d055a49450dfb69795cf355d9c506b057684762edce6cedff5

  • SHA512

    4ed40cb353ed1865dc092c0f46213dda86298fa140c089bfa23f653877ec677af38b033ac1d1f17dc9a5c7d268470cadc927bd5f37cdb32e5605ecb4c9ed0744

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs82uMuCzb:b/yC4GyNM01GuQMNXw2PSjSKkc9/MV

Score
10/10

Malware Config

Targets

    • Target

      2024-06-13_6991f83afc6547f2597e8c3cea0d0e4e_cryptolocker

    • Size

      34KB

    • MD5

      6991f83afc6547f2597e8c3cea0d0e4e

    • SHA1

      b09c986f25996a429eae00fbd2e2301bb5a24fe0

    • SHA256

      c0ab0c81c984f3d055a49450dfb69795cf355d9c506b057684762edce6cedff5

    • SHA512

      4ed40cb353ed1865dc092c0f46213dda86298fa140c089bfa23f653877ec677af38b033ac1d1f17dc9a5c7d268470cadc927bd5f37cdb32e5605ecb4c9ed0744

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs82uMuCzb:b/yC4GyNM01GuQMNXw2PSjSKkc9/MV

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks