General

  • Target

    2024-02-22_4816b17ddc80cb6be0d76438c57f6194_cryptolocker

  • Size

    75KB

  • Sample

    240222-t1ahhscd5y

  • MD5

    4816b17ddc80cb6be0d76438c57f6194

  • SHA1

    f910c11da30e5e0e740e3b1046313e3e8dfec667

  • SHA256

    7bd209df7e7ddd6daf9efd141de761e0538d0a059c7b97d7d5e961f3188e32b2

  • SHA512

    2c7c749fd851f49d1d68eba73996bf2dfc55095f0eaf9de9622aa69c073914b201eac4609fe710197f58a15cd0b5fbe7d01511c0164df5fdf904ffb3b4b9b1a2

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3Ku3b:ZVxkGOtEvwDpjcav

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_4816b17ddc80cb6be0d76438c57f6194_cryptolocker

    • Size

      75KB

    • MD5

      4816b17ddc80cb6be0d76438c57f6194

    • SHA1

      f910c11da30e5e0e740e3b1046313e3e8dfec667

    • SHA256

      7bd209df7e7ddd6daf9efd141de761e0538d0a059c7b97d7d5e961f3188e32b2

    • SHA512

      2c7c749fd851f49d1d68eba73996bf2dfc55095f0eaf9de9622aa69c073914b201eac4609fe710197f58a15cd0b5fbe7d01511c0164df5fdf904ffb3b4b9b1a2

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3Ku3b:ZVxkGOtEvwDpjcav

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks