General

  • Target

    2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker

  • Size

    83KB

  • Sample

    240420-vpnfnsdg7x

  • MD5

    f56ac8c74578e6389ad629fc3fefbed2

  • SHA1

    5169b2a407caf3791dcdb1b6e7fd5bab3e86326d

  • SHA256

    35ad29873b334a16ad3bd730b512fd35cc5b6e10f78f44e31fc0150180907203

  • SHA512

    f7d37429f64ee11ac096c90c9ab390b23bb7b14ccdcdd707dc2c90ad29914d77f0dfad769b42e6a892649018d1876ba8ba9eaf824238bb51e854a61cb256460e

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBQ:vCjsIOtEvwDpj5H9YvQd24

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker

    • Size

      83KB

    • MD5

      f56ac8c74578e6389ad629fc3fefbed2

    • SHA1

      5169b2a407caf3791dcdb1b6e7fd5bab3e86326d

    • SHA256

      35ad29873b334a16ad3bd730b512fd35cc5b6e10f78f44e31fc0150180907203

    • SHA512

      f7d37429f64ee11ac096c90c9ab390b23bb7b14ccdcdd707dc2c90ad29914d77f0dfad769b42e6a892649018d1876ba8ba9eaf824238bb51e854a61cb256460e

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBQ:vCjsIOtEvwDpj5H9YvQd24

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks