General

  • Target

    2024-02-17_47980b8909480f38018741d112b67dce_cryptolocker

  • Size

    126KB

  • Sample

    240217-lhk8asdc9s

  • MD5

    47980b8909480f38018741d112b67dce

  • SHA1

    8e3af708a39ba5c2f1c4b9971a40beafec1db6b1

  • SHA256

    59ea5763b5c562142ae7ebf884087db335840624c53523ba54d2511cfc8431fd

  • SHA512

    d65b70adc33aad325c4f64d5df2fec55189b4f2149cee7176d932af50b9d8fb5cff300338b4d448a32cd51f06fefb102349cfae4557d9890cb5234f718f92600

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpM:vCA9OtEvwDpjQ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_47980b8909480f38018741d112b67dce_cryptolocker

    • Size

      126KB

    • MD5

      47980b8909480f38018741d112b67dce

    • SHA1

      8e3af708a39ba5c2f1c4b9971a40beafec1db6b1

    • SHA256

      59ea5763b5c562142ae7ebf884087db335840624c53523ba54d2511cfc8431fd

    • SHA512

      d65b70adc33aad325c4f64d5df2fec55189b4f2149cee7176d932af50b9d8fb5cff300338b4d448a32cd51f06fefb102349cfae4557d9890cb5234f718f92600

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpM:vCA9OtEvwDpjQ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks