General

  • Target

    2024-03-20_fc73a8f8450c2dd4e6cdc78085e7be3c_cryptolocker

  • Size

    32KB

  • Sample

    240320-djkn6afd32

  • MD5

    fc73a8f8450c2dd4e6cdc78085e7be3c

  • SHA1

    1216110279da190643c57fd76bc967d1390d1777

  • SHA256

    a4e75f47a0472a98d8241cf4fa8322e0601f944d0eaad72193629e0cce863b23

  • SHA512

    e6b8c7a6d92926c5b73790ce5fd6e3eaf734f964412b0c24f8e41ee9c36255e31ba3b594115c3093249a2cacb93d81bd8630dd23b25f0b8bbcc0613387629097

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtM:b7o/2n1TCraU6GD1a4Xt9R0aOi

Score
10/10

Malware Config

Targets

    • Target

      2024-03-20_fc73a8f8450c2dd4e6cdc78085e7be3c_cryptolocker

    • Size

      32KB

    • MD5

      fc73a8f8450c2dd4e6cdc78085e7be3c

    • SHA1

      1216110279da190643c57fd76bc967d1390d1777

    • SHA256

      a4e75f47a0472a98d8241cf4fa8322e0601f944d0eaad72193629e0cce863b23

    • SHA512

      e6b8c7a6d92926c5b73790ce5fd6e3eaf734f964412b0c24f8e41ee9c36255e31ba3b594115c3093249a2cacb93d81bd8630dd23b25f0b8bbcc0613387629097

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtM:b7o/2n1TCraU6GD1a4Xt9R0aOi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks