General

  • Target

    2024-06-13_2d2804039bf69046c0860221650ab38d_cryptolocker

  • Size

    44KB

  • Sample

    240613-d1ejgawenq

  • MD5

    2d2804039bf69046c0860221650ab38d

  • SHA1

    b34a99dfe241460a03c7f3451e2dc957ebe3f364

  • SHA256

    1882dfc808d58f3ab95458f69b19b3de4c37832c9b8461a88006de1d65337868

  • SHA512

    b6cde73a4f88f3bac3a5db716a78f6b77a54162b7be48ab0a2fbb337666a1a6b9f4bf48c13bc2d8386340950d9bb392dc505e3329e04af07eebbf7af6fa83032

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHts:bCDOw9aMDooc+vANs

Score
10/10

Malware Config

Targets

    • Target

      2024-06-13_2d2804039bf69046c0860221650ab38d_cryptolocker

    • Size

      44KB

    • MD5

      2d2804039bf69046c0860221650ab38d

    • SHA1

      b34a99dfe241460a03c7f3451e2dc957ebe3f364

    • SHA256

      1882dfc808d58f3ab95458f69b19b3de4c37832c9b8461a88006de1d65337868

    • SHA512

      b6cde73a4f88f3bac3a5db716a78f6b77a54162b7be48ab0a2fbb337666a1a6b9f4bf48c13bc2d8386340950d9bb392dc505e3329e04af07eebbf7af6fa83032

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHts:bCDOw9aMDooc+vANs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks