General

  • Target

    2024-04-04_95b7d6b9460a72aeef3728f16ebbf458_cryptolocker

  • Size

    128KB

  • Sample

    240404-3mbcbsdg2t

  • MD5

    95b7d6b9460a72aeef3728f16ebbf458

  • SHA1

    43a6b02a454d4161052ecb7a403444bdafb267db

  • SHA256

    3d044318cf68426438da1125566bf20df9b60920206686d5e310773aa825f413

  • SHA512

    d4ff018bcd576103a3fd72ac0856ac986c38a439d05dad770c78f3a8cb5922c5f8b1d3e57b7b1f12047651a09354466b14be567b85eb1995dbcc582ce17ee87f

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LIT4N:vCjsIOtEvwDpj5H9YvQd2Rh

Score
10/10

Malware Config

Targets

    • Target

      2024-04-04_95b7d6b9460a72aeef3728f16ebbf458_cryptolocker

    • Size

      128KB

    • MD5

      95b7d6b9460a72aeef3728f16ebbf458

    • SHA1

      43a6b02a454d4161052ecb7a403444bdafb267db

    • SHA256

      3d044318cf68426438da1125566bf20df9b60920206686d5e310773aa825f413

    • SHA512

      d4ff018bcd576103a3fd72ac0856ac986c38a439d05dad770c78f3a8cb5922c5f8b1d3e57b7b1f12047651a09354466b14be567b85eb1995dbcc582ce17ee87f

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LIT4N:vCjsIOtEvwDpj5H9YvQd2Rh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks