General

  • Target

    2024-02-13_e21a4ff16540f29e99e46f91c747f3d5_cryptolocker

  • Size

    62KB

  • Sample

    240213-qh9m4sca26

  • MD5

    e21a4ff16540f29e99e46f91c747f3d5

  • SHA1

    16bf2564d0e45b926bd757e27c738f81683adf87

  • SHA256

    eaa096de428566542044597764fc4e394469dbb5f9426e364cf4a3bd67cdbea4

  • SHA512

    560ddae625bf73b505ad15761adbd4459e0657ec88a67d6d47280a35c9e9047c5f74ce2ffe0bf084171ca2131a0fe69e2c70378d16eab0d78a27ac914d80fad5

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbmhkX:V6a+pOtEvwDpjvC

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_e21a4ff16540f29e99e46f91c747f3d5_cryptolocker

    • Size

      62KB

    • MD5

      e21a4ff16540f29e99e46f91c747f3d5

    • SHA1

      16bf2564d0e45b926bd757e27c738f81683adf87

    • SHA256

      eaa096de428566542044597764fc4e394469dbb5f9426e364cf4a3bd67cdbea4

    • SHA512

      560ddae625bf73b505ad15761adbd4459e0657ec88a67d6d47280a35c9e9047c5f74ce2ffe0bf084171ca2131a0fe69e2c70378d16eab0d78a27ac914d80fad5

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbmhkX:V6a+pOtEvwDpjvC

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks