General

  • Target

    2024-02-02_e9bca2ae58dac1478835de575406487b_cryptolocker

  • Size

    34KB

  • Sample

    240202-ec2vjafdfl

  • MD5

    e9bca2ae58dac1478835de575406487b

  • SHA1

    dad48a9a92fc2a86423b08d22478404a48693b7e

  • SHA256

    c3138c658c09390fc3a60678540040a78a4665488518ac3fc2f94e75efb2c46a

  • SHA512

    228c35bb82e82e0645635538548d55fc15ee901260c95d72426123de5316e806ed083392f3e81355f6f69f4d72a82360149b8d90a1d296f6c00519ce0bc0779c

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183nC:btB9g/WItCSsAGjX7e9N4

Score
10/10

Malware Config

Targets

    • Target

      2024-02-02_e9bca2ae58dac1478835de575406487b_cryptolocker

    • Size

      34KB

    • MD5

      e9bca2ae58dac1478835de575406487b

    • SHA1

      dad48a9a92fc2a86423b08d22478404a48693b7e

    • SHA256

      c3138c658c09390fc3a60678540040a78a4665488518ac3fc2f94e75efb2c46a

    • SHA512

      228c35bb82e82e0645635538548d55fc15ee901260c95d72426123de5316e806ed083392f3e81355f6f69f4d72a82360149b8d90a1d296f6c00519ce0bc0779c

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183nC:btB9g/WItCSsAGjX7e9N4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks