General

  • Target

    2024-02-14_35496b40d2d459accfcea7d63cc0844b_cryptolocker

  • Size

    71KB

  • Sample

    240214-jcg8cacg8t

  • MD5

    35496b40d2d459accfcea7d63cc0844b

  • SHA1

    c600a4a5437ea756c963ba69d6825f552a3da621

  • SHA256

    fed44497174eaff0ecc72fa9b1ee941766257956a650427efa32f6cacea0c30e

  • SHA512

    c273df9614f1d177e88e063de454552ef73b6ccc2e7a5dcc9152d56a729bf25a3ff5cf8f645b619c088638fc9dfe29eccbfbfe561348851e6c1e4b4453aa6ce5

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHk:X6a+SOtEvwDpjBZYvQd2g

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_35496b40d2d459accfcea7d63cc0844b_cryptolocker

    • Size

      71KB

    • MD5

      35496b40d2d459accfcea7d63cc0844b

    • SHA1

      c600a4a5437ea756c963ba69d6825f552a3da621

    • SHA256

      fed44497174eaff0ecc72fa9b1ee941766257956a650427efa32f6cacea0c30e

    • SHA512

      c273df9614f1d177e88e063de454552ef73b6ccc2e7a5dcc9152d56a729bf25a3ff5cf8f645b619c088638fc9dfe29eccbfbfe561348851e6c1e4b4453aa6ce5

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHk:X6a+SOtEvwDpjBZYvQd2g

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks