General

  • Target

    2024-03-29_f8e70fbf58e82f02245e3323cf1413cf_cryptolocker

  • Size

    38KB

  • Sample

    240329-xteensgc59

  • MD5

    f8e70fbf58e82f02245e3323cf1413cf

  • SHA1

    498e2c2ee204d5749a8c26a4895906f8886475c8

  • SHA256

    c0b9eece0837868560761aeb48fe03e7c7148fccf76568f22b946d5e18aa5edc

  • SHA512

    a6d5a09086c5c3bea79a80d2b31ca2a9ec8ba2a50933d58f0f9f4addc8adb801c2f6319c42367ec1e769bf4f1fe2e6a0101087439d328bb4c0a3f02801c8c496

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4Y:X6QFElP6n+gJQMOtEvwDpjBmzDUp4Y

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_f8e70fbf58e82f02245e3323cf1413cf_cryptolocker

    • Size

      38KB

    • MD5

      f8e70fbf58e82f02245e3323cf1413cf

    • SHA1

      498e2c2ee204d5749a8c26a4895906f8886475c8

    • SHA256

      c0b9eece0837868560761aeb48fe03e7c7148fccf76568f22b946d5e18aa5edc

    • SHA512

      a6d5a09086c5c3bea79a80d2b31ca2a9ec8ba2a50933d58f0f9f4addc8adb801c2f6319c42367ec1e769bf4f1fe2e6a0101087439d328bb4c0a3f02801c8c496

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4Y:X6QFElP6n+gJQMOtEvwDpjBmzDUp4Y

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks