General

  • Target

    2024-02-13_f689e540beb7d01b01851d4daa68f17f_cryptolocker

  • Size

    51KB

  • Sample

    240213-g3z5qscf57

  • MD5

    f689e540beb7d01b01851d4daa68f17f

  • SHA1

    a5446106519d1164ca9c3a79a2f35cb2051cc6d4

  • SHA256

    8aa5a5ac03677724d0acac6fa84414138279c606dbd67f9e354211cd6313b39e

  • SHA512

    66fe8afdaed2d584364719c01a5bd54a02749d18c1c309892c28b107e2c70c9c85ba54a6ac1eabd24bc33b473ce37e5ae413274264508f62a0545f27782a1d49

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5Ya:ZVxkGOtEvwDpjcf

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_f689e540beb7d01b01851d4daa68f17f_cryptolocker

    • Size

      51KB

    • MD5

      f689e540beb7d01b01851d4daa68f17f

    • SHA1

      a5446106519d1164ca9c3a79a2f35cb2051cc6d4

    • SHA256

      8aa5a5ac03677724d0acac6fa84414138279c606dbd67f9e354211cd6313b39e

    • SHA512

      66fe8afdaed2d584364719c01a5bd54a02749d18c1c309892c28b107e2c70c9c85ba54a6ac1eabd24bc33b473ce37e5ae413274264508f62a0545f27782a1d49

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5Ya:ZVxkGOtEvwDpjcf

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks