General

  • Target

    2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker

  • Size

    65KB

  • Sample

    240228-nvhztaaf96

  • MD5

    b0163f26742b14984f75f550d92884dd

  • SHA1

    f723d8e2a84c6a48dbb7716630a6d06d066f2dbe

  • SHA256

    3c3d4029a5aeb5331eba2725a7244dda5b52f3e8ccc393eb1cad0632cff3dddf

  • SHA512

    1dd428c7f09e0460639cb8847ebe339d0ec788cb07413c512a882c57ee79636fb3bd4157ccb6cd432d1d2d3e8e1d4756f6eb9e127bf2823d3f0bcc46f662d2a1

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA98:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker

    • Size

      65KB

    • MD5

      b0163f26742b14984f75f550d92884dd

    • SHA1

      f723d8e2a84c6a48dbb7716630a6d06d066f2dbe

    • SHA256

      3c3d4029a5aeb5331eba2725a7244dda5b52f3e8ccc393eb1cad0632cff3dddf

    • SHA512

      1dd428c7f09e0460639cb8847ebe339d0ec788cb07413c512a882c57ee79636fb3bd4157ccb6cd432d1d2d3e8e1d4756f6eb9e127bf2823d3f0bcc46f662d2a1

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA98:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks