General

  • Target

    2024-03-05_a2655900bfde00d9c7ddffb5742be3b4_cryptolocker

  • Size

    50KB

  • Sample

    240305-3n584adh24

  • MD5

    a2655900bfde00d9c7ddffb5742be3b4

  • SHA1

    277a0d874656d9bb9fd5fc250d361d7dd97c8713

  • SHA256

    dc97305be4a5d10d68fbc5030ccff3c11778f11876373aeb6a05157456384647

  • SHA512

    45671281fb13fb27c487422acea2ce8fdf36dd11339e66e1863dd8aa74b007d2f1216fd59ab9eab4ae0ac38ac502c137d59fba8d3a0d70a87bcc189424e930ed

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0Fmy7gK3:vj+jsMQMOtEvwDpj5HczerLO04y7n

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_a2655900bfde00d9c7ddffb5742be3b4_cryptolocker

    • Size

      50KB

    • MD5

      a2655900bfde00d9c7ddffb5742be3b4

    • SHA1

      277a0d874656d9bb9fd5fc250d361d7dd97c8713

    • SHA256

      dc97305be4a5d10d68fbc5030ccff3c11778f11876373aeb6a05157456384647

    • SHA512

      45671281fb13fb27c487422acea2ce8fdf36dd11339e66e1863dd8aa74b007d2f1216fd59ab9eab4ae0ac38ac502c137d59fba8d3a0d70a87bcc189424e930ed

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0Fmy7gK3:vj+jsMQMOtEvwDpj5HczerLO04y7n

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks