General

  • Target

    2024-03-25_f6c48f9c9dc72653d1cbdbc79adfd3eb_cryptolocker

  • Size

    45KB

  • Sample

    240325-vcsjvsgb6y

  • MD5

    f6c48f9c9dc72653d1cbdbc79adfd3eb

  • SHA1

    78390eccebc981ccff83460abc71662eea909834

  • SHA256

    56e037704bfbbaa6d2159f40a55e27d7759869be557cb40a46a5ed597a28189f

  • SHA512

    594cc0e881858de0bcec42245e141891651251d6446e2297637a71fd1dcfe44bfb0058cbe8560908e11e74c0328d781783ccc4832e037b731f6c53accdf042c6

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBKccJVODvy3J8Q:79mqyNhQMOtEvwDpjBzckqJ8Q

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_f6c48f9c9dc72653d1cbdbc79adfd3eb_cryptolocker

    • Size

      45KB

    • MD5

      f6c48f9c9dc72653d1cbdbc79adfd3eb

    • SHA1

      78390eccebc981ccff83460abc71662eea909834

    • SHA256

      56e037704bfbbaa6d2159f40a55e27d7759869be557cb40a46a5ed597a28189f

    • SHA512

      594cc0e881858de0bcec42245e141891651251d6446e2297637a71fd1dcfe44bfb0058cbe8560908e11e74c0328d781783ccc4832e037b731f6c53accdf042c6

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBKccJVODvy3J8Q:79mqyNhQMOtEvwDpjBzckqJ8Q

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks