General

  • Target

    2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker

  • Size

    44KB

  • Sample

    240127-a3qsqshgc4

  • MD5

    ee3516230249c5016515d07bdc586a7f

  • SHA1

    d1b265d14bb1ac8fb7b6258284348e6394fcd728

  • SHA256

    439861743d2e06871e11e0f202c75e944bc8516819c6d868812e86883bad3de8

  • SHA512

    bd68ee0f16ebd88469735f910e1b0aa82dd03935fd578a9cd2e98a80bf0d1b64fbd4d320d5e4ec70174819389280cdfa49de79ab4f997d1517e5c24264c61c38

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpbA6q/:79mqyNhQMOtEvwDpjBzck96A

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker

    • Size

      44KB

    • MD5

      ee3516230249c5016515d07bdc586a7f

    • SHA1

      d1b265d14bb1ac8fb7b6258284348e6394fcd728

    • SHA256

      439861743d2e06871e11e0f202c75e944bc8516819c6d868812e86883bad3de8

    • SHA512

      bd68ee0f16ebd88469735f910e1b0aa82dd03935fd578a9cd2e98a80bf0d1b64fbd4d320d5e4ec70174819389280cdfa49de79ab4f997d1517e5c24264c61c38

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpbA6q/:79mqyNhQMOtEvwDpjBzck96A

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks