General

  • Target

    2024-05-14_c534212438701e2b665ed234734996a4_cryptolocker

  • Size

    85KB

  • Sample

    240514-mtjz2scd41

  • MD5

    c534212438701e2b665ed234734996a4

  • SHA1

    86e93cec702337966f716d240655851d0de7ed48

  • SHA256

    4ec7621df2bd67034399584d9a6d7f56bd7411870aecd9533acc494349e3900b

  • SHA512

    f752b52fe097184823b06873ec1cab202c45516638fea5bf72871f781340ff0e6edcd2f649117225a72c4122cc574f5d8e3b367606b005fc330531c82b1c1e08

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsg:TCjsIOtEvwDpj5HE/OUHnSM8

Score
10/10

Malware Config

Targets

    • Target

      2024-05-14_c534212438701e2b665ed234734996a4_cryptolocker

    • Size

      85KB

    • MD5

      c534212438701e2b665ed234734996a4

    • SHA1

      86e93cec702337966f716d240655851d0de7ed48

    • SHA256

      4ec7621df2bd67034399584d9a6d7f56bd7411870aecd9533acc494349e3900b

    • SHA512

      f752b52fe097184823b06873ec1cab202c45516638fea5bf72871f781340ff0e6edcd2f649117225a72c4122cc574f5d8e3b367606b005fc330531c82b1c1e08

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsg:TCjsIOtEvwDpj5HE/OUHnSM8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks