General

  • Target

    2024-02-20_8e34d18d352714b803a674474c12543c_cryptolocker

  • Size

    44KB

  • Sample

    240220-lmbjnaed4t

  • MD5

    8e34d18d352714b803a674474c12543c

  • SHA1

    ee2c1924f241f06f4371ebcb4be48e53ae7d8429

  • SHA256

    73351eb7bbd2d1e8c1cbd48fb3b4d98490f2d0a11a4f6bcffec84331e3bbc3f0

  • SHA512

    9cfbae0a788c70941130ba6247ca2cc533d3c9ebb09346b152a16b44d32b6cb091a50a8383638ed96879b44795b494275d179e9429dbe10a260155321fbf89d8

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedQ:bc/y2lkF0+BeX

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_8e34d18d352714b803a674474c12543c_cryptolocker

    • Size

      44KB

    • MD5

      8e34d18d352714b803a674474c12543c

    • SHA1

      ee2c1924f241f06f4371ebcb4be48e53ae7d8429

    • SHA256

      73351eb7bbd2d1e8c1cbd48fb3b4d98490f2d0a11a4f6bcffec84331e3bbc3f0

    • SHA512

      9cfbae0a788c70941130ba6247ca2cc533d3c9ebb09346b152a16b44d32b6cb091a50a8383638ed96879b44795b494275d179e9429dbe10a260155321fbf89d8

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedQ:bc/y2lkF0+BeX

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks