General

  • Target

    2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker

  • Size

    54KB

  • Sample

    240517-vd1a4ahc94

  • MD5

    da9eaa1a4eaa4f2c49f3d22d8f2a33b5

  • SHA1

    8bba0d2f76df243e7ca24009e3499a2fa19e48ba

  • SHA256

    535b70736283951165c7a06caa3ddcbc879eadf7b21b905129ca178bd630d6f0

  • SHA512

    0bbc27b9707e8622cad3342dfce9ee3a7f33d4c6b9ef8d6c6a1a4d2ba67f1e920d66a570d272b33e3b15de5946d4cc6054bee7be734e7f3fc155a0e01934320f

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6t:bc/y2lm6iH/NLp17zrV9L

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker

    • Size

      54KB

    • MD5

      da9eaa1a4eaa4f2c49f3d22d8f2a33b5

    • SHA1

      8bba0d2f76df243e7ca24009e3499a2fa19e48ba

    • SHA256

      535b70736283951165c7a06caa3ddcbc879eadf7b21b905129ca178bd630d6f0

    • SHA512

      0bbc27b9707e8622cad3342dfce9ee3a7f33d4c6b9ef8d6c6a1a4d2ba67f1e920d66a570d272b33e3b15de5946d4cc6054bee7be734e7f3fc155a0e01934320f

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6t:bc/y2lm6iH/NLp17zrV9L

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks