General

  • Target

    2024-01-24_5782824b591752d38e18a18b4376dc08_cryptolocker

  • Size

    72KB

  • Sample

    240124-y627yagfa6

  • MD5

    5782824b591752d38e18a18b4376dc08

  • SHA1

    46bd7a6c1f5afbd99f6b6cdc834e73f2778ca3a8

  • SHA256

    cf3400cfe838895dddb9d6de862ec3fe992dc6f881724b8c669b10eca24fe7dd

  • SHA512

    4b73193bc739f6cac1bf7667bae9edd831d3ce6ec03c90909fad1935d088985622b10cf03133d5bd8510ae61a25901b93893c98626d9b675c2b1c032708b2580

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Ru:X6a+SOtEvwDpjBZYvQd2E

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_5782824b591752d38e18a18b4376dc08_cryptolocker

    • Size

      72KB

    • MD5

      5782824b591752d38e18a18b4376dc08

    • SHA1

      46bd7a6c1f5afbd99f6b6cdc834e73f2778ca3a8

    • SHA256

      cf3400cfe838895dddb9d6de862ec3fe992dc6f881724b8c669b10eca24fe7dd

    • SHA512

      4b73193bc739f6cac1bf7667bae9edd831d3ce6ec03c90909fad1935d088985622b10cf03133d5bd8510ae61a25901b93893c98626d9b675c2b1c032708b2580

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Ru:X6a+SOtEvwDpjBZYvQd2E

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks