General

  • Target

    2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker

  • Size

    43KB

  • Sample

    240327-yl61dsaf88

  • MD5

    6a067f58eb10a828556ace242510ab12

  • SHA1

    1c9951acf81f41b829e00b7229ef7951292d29e7

  • SHA256

    0b1ee9d580395c27bc06a08b34615497abf28c227178cfe0215bd6db8b596112

  • SHA512

    6ba2e537be4efb80b253143caf0b353071cc8d2ca9ac96895cf150befe1d1c813ba6df306e7901b82c54d873cd397b875e602ea32ef18e935fd13068933ee3b2

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNH:bgGYcA/53GADw8Cl/O

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker

    • Size

      43KB

    • MD5

      6a067f58eb10a828556ace242510ab12

    • SHA1

      1c9951acf81f41b829e00b7229ef7951292d29e7

    • SHA256

      0b1ee9d580395c27bc06a08b34615497abf28c227178cfe0215bd6db8b596112

    • SHA512

      6ba2e537be4efb80b253143caf0b353071cc8d2ca9ac96895cf150befe1d1c813ba6df306e7901b82c54d873cd397b875e602ea32ef18e935fd13068933ee3b2

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNH:bgGYcA/53GADw8Cl/O

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks