General

  • Target

    2024-02-22_c48cd7c079a79207ce0903fddedbe89e_cryptolocker

  • Size

    62KB

  • Sample

    240222-s9yq2abh8y

  • MD5

    c48cd7c079a79207ce0903fddedbe89e

  • SHA1

    69e6194b7b41d6a2ffd446cfc2602f0424b2dcb5

  • SHA256

    a1ced3965f8f2d6958843f4cca491dd06cd0a686f16661431307e619e926e65a

  • SHA512

    e50e8d99dfa6ee10935e747131032ba32540439c4b5fdd8db5e0920018ca4b8b827a81b83c9665af773b078df5c18d60570d3bc1af93b39483a002d7f93f013a

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbmhk4:V6a+pOtEvwDpjvZ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_c48cd7c079a79207ce0903fddedbe89e_cryptolocker

    • Size

      62KB

    • MD5

      c48cd7c079a79207ce0903fddedbe89e

    • SHA1

      69e6194b7b41d6a2ffd446cfc2602f0424b2dcb5

    • SHA256

      a1ced3965f8f2d6958843f4cca491dd06cd0a686f16661431307e619e926e65a

    • SHA512

      e50e8d99dfa6ee10935e747131032ba32540439c4b5fdd8db5e0920018ca4b8b827a81b83c9665af773b078df5c18d60570d3bc1af93b39483a002d7f93f013a

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbmhk4:V6a+pOtEvwDpjvZ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks