General

  • Target

    2024-02-28_56b9b4e11b8e0ad8a082595d2c7fb098_cryptolocker

  • Size

    126KB

  • Sample

    240228-zd5b9sdc89

  • MD5

    56b9b4e11b8e0ad8a082595d2c7fb098

  • SHA1

    d9f25ab7d2cc44dd3cc6a2f3e9b621963d032dd6

  • SHA256

    073a61981e62c4b573e74bdea9cbe0b43eb6697f295e6822cb91275b363c6149

  • SHA512

    11ed07745c18cfefe650c7c96e8df9eda0bc7f38fdb19bc9e19030d02cf64e0a3b62391505a14e53d60d6b0d038a5ab291b89ab8f9c0cdbe8e3a1c227b07bf9c

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpR/2:vCA9OtEvwDpjo

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_56b9b4e11b8e0ad8a082595d2c7fb098_cryptolocker

    • Size

      126KB

    • MD5

      56b9b4e11b8e0ad8a082595d2c7fb098

    • SHA1

      d9f25ab7d2cc44dd3cc6a2f3e9b621963d032dd6

    • SHA256

      073a61981e62c4b573e74bdea9cbe0b43eb6697f295e6822cb91275b363c6149

    • SHA512

      11ed07745c18cfefe650c7c96e8df9eda0bc7f38fdb19bc9e19030d02cf64e0a3b62391505a14e53d60d6b0d038a5ab291b89ab8f9c0cdbe8e3a1c227b07bf9c

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpR/2:vCA9OtEvwDpjo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks