General

  • Target

    2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker

  • Size

    57KB

  • Sample

    240214-wfbk7aab57

  • MD5

    fc2bf02250cdf2c00c61d83a8f570e42

  • SHA1

    26cbe43bfa284fdd974540e50485bb922750b5bc

  • SHA256

    03f949818d3c49a3f63f820e93bacb54e11af32781c48b06d381e49cbd0149ad

  • SHA512

    85992589ffc5531c9266f141465782b059aa4e7cb8f03fa055bf74f28d400a62f2bf97d27c8f8ac173281dfeb6113e1da74cf14e2255ebdcddc8eb323be0ca9a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbF:xj+VGMOtEvwDpjubEgV20DF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker

    • Size

      57KB

    • MD5

      fc2bf02250cdf2c00c61d83a8f570e42

    • SHA1

      26cbe43bfa284fdd974540e50485bb922750b5bc

    • SHA256

      03f949818d3c49a3f63f820e93bacb54e11af32781c48b06d381e49cbd0149ad

    • SHA512

      85992589ffc5531c9266f141465782b059aa4e7cb8f03fa055bf74f28d400a62f2bf97d27c8f8ac173281dfeb6113e1da74cf14e2255ebdcddc8eb323be0ca9a

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbF:xj+VGMOtEvwDpjubEgV20DF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks