General

  • Target

    2024-01-27_9aa3da6699b6039bc29d81e39a825b88_cryptolocker

  • Size

    44KB

  • Sample

    240127-eckk9aeagk

  • MD5

    9aa3da6699b6039bc29d81e39a825b88

  • SHA1

    c4605ced13fe8fc0ebf6aab14d1ecad389ed945e

  • SHA256

    136a9dfe18ee99d9f0d60cb4b75a8a6b748816b5d74c79efdc08ed6a594c1c60

  • SHA512

    f1282a56aee977fa5d355fe7bcfec71ec197848cb7e8c93d4947f84cef45803022fc0516e464a1b8f807ac664017e743405a400da369f58d9429e9469107504d

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Ylmbo:bgGYcA/53GAA6y37Qm0

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_9aa3da6699b6039bc29d81e39a825b88_cryptolocker

    • Size

      44KB

    • MD5

      9aa3da6699b6039bc29d81e39a825b88

    • SHA1

      c4605ced13fe8fc0ebf6aab14d1ecad389ed945e

    • SHA256

      136a9dfe18ee99d9f0d60cb4b75a8a6b748816b5d74c79efdc08ed6a594c1c60

    • SHA512

      f1282a56aee977fa5d355fe7bcfec71ec197848cb7e8c93d4947f84cef45803022fc0516e464a1b8f807ac664017e743405a400da369f58d9429e9469107504d

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Ylmbo:bgGYcA/53GAA6y37Qm0

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks