General

  • Target

    2024-02-03_e1dc019c9897edd269195ed82ca0f492_cryptolocker

  • Size

    70KB

  • Sample

    240203-jh9jsaccg6

  • MD5

    e1dc019c9897edd269195ed82ca0f492

  • SHA1

    a320a68a6da54563006baff45284975ff3e483ef

  • SHA256

    b17bcc36fb66a81a33bdc685c2ca315d524bb3266f3939c717941857c0e47364

  • SHA512

    53431834dc2563425f3af2f86de00b396a7d0726aa0f0e875ff6607c985e422a9080e1640c3749dd21650441229e12b24b8a9ee2a01b3f1528bf925754ec1be0

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1bW:X6a+SOtEvwDpjBZYvQd2i

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_e1dc019c9897edd269195ed82ca0f492_cryptolocker

    • Size

      70KB

    • MD5

      e1dc019c9897edd269195ed82ca0f492

    • SHA1

      a320a68a6da54563006baff45284975ff3e483ef

    • SHA256

      b17bcc36fb66a81a33bdc685c2ca315d524bb3266f3939c717941857c0e47364

    • SHA512

      53431834dc2563425f3af2f86de00b396a7d0726aa0f0e875ff6607c985e422a9080e1640c3749dd21650441229e12b24b8a9ee2a01b3f1528bf925754ec1be0

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1bW:X6a+SOtEvwDpjBZYvQd2i

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks