General

  • Target

    2024-05-14_e35935be43236b62170a5e92c330b7c4_cryptolocker

  • Size

    42KB

  • Sample

    240514-bwa95sec65

  • MD5

    e35935be43236b62170a5e92c330b7c4

  • SHA1

    6269eafb301393430595b40d97e10d26fd6eb76c

  • SHA256

    a741ddcd921849511ddf7963b2bb5df6c724c868570e7124adf3e794b7e5c274

  • SHA512

    f8fd92b924ec8bd7cea91f20c631b93b8fe5df12a9642cae43148e18ea5ad5d7119651d73ab5f80a1fee0c95abef9acb7a4a07727f6f948b7b6ee685bb07496e

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAB:bCDOw9aMDooc+vAB

Score
10/10

Malware Config

Targets

    • Target

      2024-05-14_e35935be43236b62170a5e92c330b7c4_cryptolocker

    • Size

      42KB

    • MD5

      e35935be43236b62170a5e92c330b7c4

    • SHA1

      6269eafb301393430595b40d97e10d26fd6eb76c

    • SHA256

      a741ddcd921849511ddf7963b2bb5df6c724c868570e7124adf3e794b7e5c274

    • SHA512

      f8fd92b924ec8bd7cea91f20c631b93b8fe5df12a9642cae43148e18ea5ad5d7119651d73ab5f80a1fee0c95abef9acb7a4a07727f6f948b7b6ee685bb07496e

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAB:bCDOw9aMDooc+vAB

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks