General

  • Target

    2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker

  • Size

    41KB

  • Sample

    240427-ct4pcahb44

  • MD5

    2bf44785abaef20657fceeae6db4c81a

  • SHA1

    452cd8ad1081adb68120fb7344af058395185cb2

  • SHA256

    11a68381597a59ff3f9f87f7b28d95d48edb6627da6010e70035dbc28116ec4b

  • SHA512

    af81da0bbf3a54062291fbabc0bbf9c0dbea2f440c04265d83264c5b38e7cfc93d69b7039cc68de964041abd83460705829c46efbcf6e9a7eb839e6b61cd553d

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAk:bCDOw9aMDooc+vAk

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker

    • Size

      41KB

    • MD5

      2bf44785abaef20657fceeae6db4c81a

    • SHA1

      452cd8ad1081adb68120fb7344af058395185cb2

    • SHA256

      11a68381597a59ff3f9f87f7b28d95d48edb6627da6010e70035dbc28116ec4b

    • SHA512

      af81da0bbf3a54062291fbabc0bbf9c0dbea2f440c04265d83264c5b38e7cfc93d69b7039cc68de964041abd83460705829c46efbcf6e9a7eb839e6b61cd553d

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAk:bCDOw9aMDooc+vAk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks