General

  • Target

    2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker

  • Size

    40KB

  • Sample

    240325-yg3r6sbc2z

  • MD5

    29f3b91f5e03c0fafb4992a177597905

  • SHA1

    e73ac880db23be747215928b66e0b16a96a86153

  • SHA256

    536458fd5b134be71109e094ca78ab5ded6de5a6bcb8ee16fdf7346cd665baa9

  • SHA512

    f7aba1a3eca2a4f55e8e9d79fbcf0deae2234534af74619814eff6a98b80f744c5eb23f7ea53baae20b2fe3da1686b8df03f03e13b3c591f7caef0d1eedc408c

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAY:bCDOw9aMDooc+vAY

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker

    • Size

      40KB

    • MD5

      29f3b91f5e03c0fafb4992a177597905

    • SHA1

      e73ac880db23be747215928b66e0b16a96a86153

    • SHA256

      536458fd5b134be71109e094ca78ab5ded6de5a6bcb8ee16fdf7346cd665baa9

    • SHA512

      f7aba1a3eca2a4f55e8e9d79fbcf0deae2234534af74619814eff6a98b80f744c5eb23f7ea53baae20b2fe3da1686b8df03f03e13b3c591f7caef0d1eedc408c

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAY:bCDOw9aMDooc+vAY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks