General

  • Target

    2024-02-14_b84113855247d6426850253d7b1d376e_cryptolocker

  • Size

    49KB

  • Sample

    240214-v1ktxsgg51

  • MD5

    b84113855247d6426850253d7b1d376e

  • SHA1

    63493eb41ad6dc43c1ebf1c2443e0d994a7c06fd

  • SHA256

    07f5eb504a6fb6cfa90a1628e34c94816f0fa54b16787db62fb1f0127d041b6f

  • SHA512

    197a357ed624e0d30349e859d78a45a54178e78ad75dbf473054c140753e107ef8431217ca392224641c394b574ddf582e73301be4d4afb1b1dc7029f8c63eb8

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNsh:V6a+pOtEvwDpjt

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_b84113855247d6426850253d7b1d376e_cryptolocker

    • Size

      49KB

    • MD5

      b84113855247d6426850253d7b1d376e

    • SHA1

      63493eb41ad6dc43c1ebf1c2443e0d994a7c06fd

    • SHA256

      07f5eb504a6fb6cfa90a1628e34c94816f0fa54b16787db62fb1f0127d041b6f

    • SHA512

      197a357ed624e0d30349e859d78a45a54178e78ad75dbf473054c140753e107ef8431217ca392224641c394b574ddf582e73301be4d4afb1b1dc7029f8c63eb8

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNsh:V6a+pOtEvwDpjt

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks