General

  • Target

    2024-02-23_aeae2330f53c7b0a5825ea160f8e34c3_cryptolocker

  • Size

    59KB

  • Sample

    240223-lwjlmafa25

  • MD5

    aeae2330f53c7b0a5825ea160f8e34c3

  • SHA1

    bafe29d27a5dca26a3a94427507c66e6bf448132

  • SHA256

    db2da8cdadb34d108a133da8707dd53c94f9aa3fba02dff7c6e7c295d972341b

  • SHA512

    242025d5d5fe09e0163fcb127ebf909639e1d695ba8dd523dd9fccc54a1d232661a8b0908a1784300c0b7f64760cc2f03d940fe22cfe40551682baf775a33a60

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lBOr:ZVxkGOtEvwDpjP

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_aeae2330f53c7b0a5825ea160f8e34c3_cryptolocker

    • Size

      59KB

    • MD5

      aeae2330f53c7b0a5825ea160f8e34c3

    • SHA1

      bafe29d27a5dca26a3a94427507c66e6bf448132

    • SHA256

      db2da8cdadb34d108a133da8707dd53c94f9aa3fba02dff7c6e7c295d972341b

    • SHA512

      242025d5d5fe09e0163fcb127ebf909639e1d695ba8dd523dd9fccc54a1d232661a8b0908a1784300c0b7f64760cc2f03d940fe22cfe40551682baf775a33a60

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lBOr:ZVxkGOtEvwDpjP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks