General

  • Target

    2024-03-26_658120adfa9a214f3e1caa9388177ef5_cryptolocker

  • Size

    40KB

  • Sample

    240326-3kl12shg8y

  • MD5

    658120adfa9a214f3e1caa9388177ef5

  • SHA1

    ed7492aca6d8f181e2ecd97b4c71fe32677dcfc3

  • SHA256

    60bb4881a108382592437e9d964a4ce98328e0d197d34137fb8b3106a53a54ec

  • SHA512

    451f8b0fb6d7447ac9afed0a5d6631aaa80646442d06e490400d24f9d980e1a112797cf9776b3c3ff65595c48e4701b1695d1a610b4b5feac9219d9669a52427

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAB:bCDOw9aMDooc+vAB

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_658120adfa9a214f3e1caa9388177ef5_cryptolocker

    • Size

      40KB

    • MD5

      658120adfa9a214f3e1caa9388177ef5

    • SHA1

      ed7492aca6d8f181e2ecd97b4c71fe32677dcfc3

    • SHA256

      60bb4881a108382592437e9d964a4ce98328e0d197d34137fb8b3106a53a54ec

    • SHA512

      451f8b0fb6d7447ac9afed0a5d6631aaa80646442d06e490400d24f9d980e1a112797cf9776b3c3ff65595c48e4701b1695d1a610b4b5feac9219d9669a52427

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAB:bCDOw9aMDooc+vAB

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks