General

  • Target

    2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker

  • Size

    44KB

  • Sample

    240511-szs3ssdf7x

  • MD5

    cfdfefa7cfc92e75be30d2d40686e386

  • SHA1

    e8b1c3c9d85f12c984f8e3a513003a640680c866

  • SHA256

    f394ce196dbfce1b07e969b6578ce843ed68e3f9db73bae1b0e8e166e3fc320f

  • SHA512

    aa2deb9cb912be0f50d5e41ae5ad7a641ff0c9b8ef200555512c5312a59fd61a5b122d332b25ce84fa2e607c0fb67df8b3604ab852a19a25741fd0fbdc9e32bb

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIIy:bm74zYcgT/Ekn0ryfjUy

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker

    • Size

      44KB

    • MD5

      cfdfefa7cfc92e75be30d2d40686e386

    • SHA1

      e8b1c3c9d85f12c984f8e3a513003a640680c866

    • SHA256

      f394ce196dbfce1b07e969b6578ce843ed68e3f9db73bae1b0e8e166e3fc320f

    • SHA512

      aa2deb9cb912be0f50d5e41ae5ad7a641ff0c9b8ef200555512c5312a59fd61a5b122d332b25ce84fa2e607c0fb67df8b3604ab852a19a25741fd0fbdc9e32bb

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIIy:bm74zYcgT/Ekn0ryfjUy

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks