General

  • Target

    2024-02-12_1b3d0a704a32d69aeab4788008ef21f7_cryptolocker

  • Size

    35KB

  • Sample

    240212-njsd4sbh7s

  • MD5

    1b3d0a704a32d69aeab4788008ef21f7

  • SHA1

    0cdfb37c1dd535dee6d8daaec9ef31c9f061622f

  • SHA256

    3693a6db09ed856b8ed76a2bcf662998d5262c3c52116ce97c66361a310c04d6

  • SHA512

    df8bc0abf5d2dc5d3f9dfc5c764e254f2cf307a894b454d1689f9d504e7df11d147eb65ff6f579a059b4d05fb1408295b4c4a7d9b08f1226b02d0be5dbb57be5

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKjb:btB9g/WItCSsAGjX7e9N0hunKP

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_1b3d0a704a32d69aeab4788008ef21f7_cryptolocker

    • Size

      35KB

    • MD5

      1b3d0a704a32d69aeab4788008ef21f7

    • SHA1

      0cdfb37c1dd535dee6d8daaec9ef31c9f061622f

    • SHA256

      3693a6db09ed856b8ed76a2bcf662998d5262c3c52116ce97c66361a310c04d6

    • SHA512

      df8bc0abf5d2dc5d3f9dfc5c764e254f2cf307a894b454d1689f9d504e7df11d147eb65ff6f579a059b4d05fb1408295b4c4a7d9b08f1226b02d0be5dbb57be5

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKjb:btB9g/WItCSsAGjX7e9N0hunKP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks