General

  • Target

    2024-02-28_922dedcc54cb9b63343a86e50c28b097_cryptolocker

  • Size

    85KB

  • Sample

    240228-gakjkscd5x

  • MD5

    922dedcc54cb9b63343a86e50c28b097

  • SHA1

    87285ba76025442a5f5a1a3b5479b17d50dadf3d

  • SHA256

    da4bf236e88f381856635a223bee904a5fb8bc8e94178687adb3e226ceca2ade

  • SHA512

    c0f07237f5c78fac8da8af68e4c238f130f66ab9abe92c47edea588b6a87f2419e1fecd53b722b8467ea3c9563de919fc11411fdaebad359626ec1a90d1a7b2f

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxraS:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8z0

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_922dedcc54cb9b63343a86e50c28b097_cryptolocker

    • Size

      85KB

    • MD5

      922dedcc54cb9b63343a86e50c28b097

    • SHA1

      87285ba76025442a5f5a1a3b5479b17d50dadf3d

    • SHA256

      da4bf236e88f381856635a223bee904a5fb8bc8e94178687adb3e226ceca2ade

    • SHA512

      c0f07237f5c78fac8da8af68e4c238f130f66ab9abe92c47edea588b6a87f2419e1fecd53b722b8467ea3c9563de919fc11411fdaebad359626ec1a90d1a7b2f

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxraS:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8z0

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks