General

  • Target

    2024-01-26_559e26c567e6cc2abd232a6ca051ea13_cryptolocker

  • Size

    39KB

  • Sample

    240126-h9nkysgge5

  • MD5

    559e26c567e6cc2abd232a6ca051ea13

  • SHA1

    c83db4ba87dabeff4bcf7b5dc898c8ff0b2401c6

  • SHA256

    bc5745d1c7bb367bd53554eae33ee026f53fbac986092ac13cdc8331cb953da2

  • SHA512

    bbb25c3e99ca5a5904d70f59fe8b3084a6fdd35e76db3991b8dd42a3d3bacbd1f4cdaca2b1bbf5609d246e0cfdee7deb0d64547bf44cfa30fa2cb7f8ebe1b798

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFy:79inqyNR/QtOOtEvwDpjBKcmq

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_559e26c567e6cc2abd232a6ca051ea13_cryptolocker

    • Size

      39KB

    • MD5

      559e26c567e6cc2abd232a6ca051ea13

    • SHA1

      c83db4ba87dabeff4bcf7b5dc898c8ff0b2401c6

    • SHA256

      bc5745d1c7bb367bd53554eae33ee026f53fbac986092ac13cdc8331cb953da2

    • SHA512

      bbb25c3e99ca5a5904d70f59fe8b3084a6fdd35e76db3991b8dd42a3d3bacbd1f4cdaca2b1bbf5609d246e0cfdee7deb0d64547bf44cfa30fa2cb7f8ebe1b798

    • SSDEEP

      384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFy:79inqyNR/QtOOtEvwDpjBKcmq

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks