General

  • Target

    2024-03-25_9fba058bee69433e344c4f785b95909e_cryptolocker

  • Size

    37KB

  • Sample

    240325-zfdbkahb75

  • MD5

    9fba058bee69433e344c4f785b95909e

  • SHA1

    3317ee8a49a8bf146a709a555d6356172de3dbbb

  • SHA256

    adacfe2ad824e57b4d699143dc001cc90af25d1667e3a12aa50bc5ec0ae2f9ae

  • SHA512

    d4f61aad3c8d3377554136768ae9da65827caf73d7dfb0901df04eb8cd6aa881a7026bfccb03e3ce99446f43a13a11cb98e70e50dc1685a2dec6459fe909bc10

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUT:ZzFbxmLPWQMOtEvwDpjLeW

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_9fba058bee69433e344c4f785b95909e_cryptolocker

    • Size

      37KB

    • MD5

      9fba058bee69433e344c4f785b95909e

    • SHA1

      3317ee8a49a8bf146a709a555d6356172de3dbbb

    • SHA256

      adacfe2ad824e57b4d699143dc001cc90af25d1667e3a12aa50bc5ec0ae2f9ae

    • SHA512

      d4f61aad3c8d3377554136768ae9da65827caf73d7dfb0901df04eb8cd6aa881a7026bfccb03e3ce99446f43a13a11cb98e70e50dc1685a2dec6459fe909bc10

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUT:ZzFbxmLPWQMOtEvwDpjLeW

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks