General

  • Target

    2024-01-28_32251062195363c89037875f584b9d2a_cryptolocker

  • Size

    48KB

  • Sample

    240128-h9zyzsffeq

  • MD5

    32251062195363c89037875f584b9d2a

  • SHA1

    273275ea1a02ff247c777f88bc8d69345efc7382

  • SHA256

    16771751097efbf8411c3b6b13b2f1429b095dec8ea53c820ddfe81fc356b4ea

  • SHA512

    ce70e724509b3305d3e6f338ae33c026a14f33415c2e44ef2203562ccb2a1f420a0c300726caa98cc577e96b78043a2828f110570be480f9d52698f059f16489

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIO:79mqyNhQMOtEvwDpjBxe8TpXO

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_32251062195363c89037875f584b9d2a_cryptolocker

    • Size

      48KB

    • MD5

      32251062195363c89037875f584b9d2a

    • SHA1

      273275ea1a02ff247c777f88bc8d69345efc7382

    • SHA256

      16771751097efbf8411c3b6b13b2f1429b095dec8ea53c820ddfe81fc356b4ea

    • SHA512

      ce70e724509b3305d3e6f338ae33c026a14f33415c2e44ef2203562ccb2a1f420a0c300726caa98cc577e96b78043a2828f110570be480f9d52698f059f16489

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIO:79mqyNhQMOtEvwDpjBxe8TpXO

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks