General

  • Target

    2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker

  • Size

    41KB

  • Sample

    240429-12jadada6x

  • MD5

    b7aee36fe1263e54025127668bccbf4a

  • SHA1

    b1fa28fd856c7be7aeb9d34b519477c9e5404a1a

  • SHA256

    31ebe5ca646dc97c741a9fbdfc00c76188f9736d3416b23c76668be62bdcc7cd

  • SHA512

    05850e9069fb439b03824fdffe195f41d8c38d2a8a253cdacf04ef0ba9659a08c50b21b78353cf1e7569dc0c5a6eae7ee423cfc76dd3c39b63adfd88a3f4a14a

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXt:bCDOw9aMDooc+vAXt

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker

    • Size

      41KB

    • MD5

      b7aee36fe1263e54025127668bccbf4a

    • SHA1

      b1fa28fd856c7be7aeb9d34b519477c9e5404a1a

    • SHA256

      31ebe5ca646dc97c741a9fbdfc00c76188f9736d3416b23c76668be62bdcc7cd

    • SHA512

      05850e9069fb439b03824fdffe195f41d8c38d2a8a253cdacf04ef0ba9659a08c50b21b78353cf1e7569dc0c5a6eae7ee423cfc76dd3c39b63adfd88a3f4a14a

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXt:bCDOw9aMDooc+vAXt

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks