General

  • Target

    2024-06-19_7b55fb701eb7c0e83a6681cfd04c84d3_cryptolocker

  • Size

    56KB

  • Sample

    240619-yc7kkaycrh

  • MD5

    7b55fb701eb7c0e83a6681cfd04c84d3

  • SHA1

    90a2ad5768c72c7c7f1570098fc0ee85b9b96909

  • SHA256

    f4fb07b67c938e4c375998662a577351ca20d89404ac8f710dd03b9047902394

  • SHA512

    7b7a924204419681d9120f8b3b812889d522b8810fa372a8ec82f4597bb13e1ec12c94a961acd07686bc1c2474bc674a383968459f412fcdebb812c35ed3c676

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eUi:6j+1NMOtEvwDpjr8oxExet

Score
10/10

Malware Config

Targets

    • Target

      2024-06-19_7b55fb701eb7c0e83a6681cfd04c84d3_cryptolocker

    • Size

      56KB

    • MD5

      7b55fb701eb7c0e83a6681cfd04c84d3

    • SHA1

      90a2ad5768c72c7c7f1570098fc0ee85b9b96909

    • SHA256

      f4fb07b67c938e4c375998662a577351ca20d89404ac8f710dd03b9047902394

    • SHA512

      7b7a924204419681d9120f8b3b812889d522b8810fa372a8ec82f4597bb13e1ec12c94a961acd07686bc1c2474bc674a383968459f412fcdebb812c35ed3c676

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eUi:6j+1NMOtEvwDpjr8oxExet

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks