General

  • Target

    2024-02-22_21d3797a9e4ad32a1020fa62706e4c8d_cryptolocker

  • Size

    32KB

  • Sample

    240222-ljfn7sfg82

  • MD5

    21d3797a9e4ad32a1020fa62706e4c8d

  • SHA1

    d6d7c5e326f9ef253fa08cf78a2904f0fec3750a

  • SHA256

    9bd8e073b6c1f5dbff20dfa0400927d2e476a4da236268ae23ffeed7fd64cc12

  • SHA512

    d6a916cd02a6f312958c14aaa9f777fca66b140f781d63b5562bce5e72f3a3ab9c1a261d9607adf603f13ed75f1225ee527826fd68e11809a6dba09c1d1eade2

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+OOd:b7o/2n1TCraU6GD1a4Xt9h6

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_21d3797a9e4ad32a1020fa62706e4c8d_cryptolocker

    • Size

      32KB

    • MD5

      21d3797a9e4ad32a1020fa62706e4c8d

    • SHA1

      d6d7c5e326f9ef253fa08cf78a2904f0fec3750a

    • SHA256

      9bd8e073b6c1f5dbff20dfa0400927d2e476a4da236268ae23ffeed7fd64cc12

    • SHA512

      d6a916cd02a6f312958c14aaa9f777fca66b140f781d63b5562bce5e72f3a3ab9c1a261d9607adf603f13ed75f1225ee527826fd68e11809a6dba09c1d1eade2

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+OOd:b7o/2n1TCraU6GD1a4Xt9h6

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks