General

  • Target

    2024-05-19_d7e0e7735608048fc1ab8a4a9504f3b6_cryptolocker

  • Size

    57KB

  • Sample

    240519-zcckvsgf8x

  • MD5

    d7e0e7735608048fc1ab8a4a9504f3b6

  • SHA1

    0e2f9463166906a4fc7eedfb899622d22f94000e

  • SHA256

    ea5487f7ffdd32dafdaccc5db699f8d113defcf169a4d486f1fd997458eec3e2

  • SHA512

    13871f95dcd9c3c74a91309095ea72e076c8f61c89334f10a7fc5c784df1e6c51c84d45c7ca1bae1e526f95f581b427596ea7f81410cbdd72d8e0179ccdbadb5

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GowfjSP:xj+VGMOtEvwDpjubEga

Score
10/10

Malware Config

Targets

    • Target

      2024-05-19_d7e0e7735608048fc1ab8a4a9504f3b6_cryptolocker

    • Size

      57KB

    • MD5

      d7e0e7735608048fc1ab8a4a9504f3b6

    • SHA1

      0e2f9463166906a4fc7eedfb899622d22f94000e

    • SHA256

      ea5487f7ffdd32dafdaccc5db699f8d113defcf169a4d486f1fd997458eec3e2

    • SHA512

      13871f95dcd9c3c74a91309095ea72e076c8f61c89334f10a7fc5c784df1e6c51c84d45c7ca1bae1e526f95f581b427596ea7f81410cbdd72d8e0179ccdbadb5

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GowfjSP:xj+VGMOtEvwDpjubEga

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks