General

  • Target

    2024-02-21_fb50b92a05db797d4d9d79235a83129f_cryptolocker

  • Size

    50KB

  • Sample

    240221-rmgcssgg3s

  • MD5

    fb50b92a05db797d4d9d79235a83129f

  • SHA1

    31795fc9127794aaeb538e7ff57ca318cac55715

  • SHA256

    d148566a8913d46190de342c51df02c1f4db345f978678b3803da207736acd6b

  • SHA512

    ed7162690b82b9198c7293f02efed5eb32bf3e754029a3b137696c6cd1f59c97b244ee0451bebfadab7e1d2846039f52d09e85772f2106682ab749d8fffc4be6

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaf:X6QFElP6n+gJBMOtEvwDpjBtExmln

Score
10/10

Malware Config

Targets

    • Target

      2024-02-21_fb50b92a05db797d4d9d79235a83129f_cryptolocker

    • Size

      50KB

    • MD5

      fb50b92a05db797d4d9d79235a83129f

    • SHA1

      31795fc9127794aaeb538e7ff57ca318cac55715

    • SHA256

      d148566a8913d46190de342c51df02c1f4db345f978678b3803da207736acd6b

    • SHA512

      ed7162690b82b9198c7293f02efed5eb32bf3e754029a3b137696c6cd1f59c97b244ee0451bebfadab7e1d2846039f52d09e85772f2106682ab749d8fffc4be6

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaf:X6QFElP6n+gJBMOtEvwDpjBtExmln

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks