General

  • Target

    2024-05-12_85dfeaf969c3746c08e5691236cc3358_cryptolocker

  • Size

    42KB

  • Sample

    240512-je138seg5x

  • MD5

    85dfeaf969c3746c08e5691236cc3358

  • SHA1

    f6d0cc77fd31ed503217eba15b866334bc588325

  • SHA256

    a9f4141fffadf8078b92ed00c97d0c5309d857260efc2195229fa73a8e440dfa

  • SHA512

    67033d36f65a605ffeb8b4bd3781f2d2aefe4f68f0613c56c90b6661e10e5f76f0e9b7299fdee0b4538a453aa11bbca906a72c2f991fff89d46748174db34232

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3F:bIDOw9a0Dwo3P1ojvUSD79RF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-12_85dfeaf969c3746c08e5691236cc3358_cryptolocker

    • Size

      42KB

    • MD5

      85dfeaf969c3746c08e5691236cc3358

    • SHA1

      f6d0cc77fd31ed503217eba15b866334bc588325

    • SHA256

      a9f4141fffadf8078b92ed00c97d0c5309d857260efc2195229fa73a8e440dfa

    • SHA512

      67033d36f65a605ffeb8b4bd3781f2d2aefe4f68f0613c56c90b6661e10e5f76f0e9b7299fdee0b4538a453aa11bbca906a72c2f991fff89d46748174db34232

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3F:bIDOw9a0Dwo3P1ojvUSD79RF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks