General

  • Target

    2024-05-21_61f1d27da5ccdabfb55cbf301804945b_cryptolocker

  • Size

    44KB

  • Sample

    240521-s33reaaf53

  • MD5

    61f1d27da5ccdabfb55cbf301804945b

  • SHA1

    cf9ed1bbf4144a664c2b480ae3f7552497785d2f

  • SHA256

    0e39192616e6b8afce47c03fe13d3bb6877c6017b9d649c51786eba796a0640d

  • SHA512

    d65e1f290087aed450b667f4310924c890fe78cff0ea855d216792767771f364df287c939d5d94e575093e804d4b25ceea4bbb1df2e9bb4fa8ca0202df15a8ec

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0Dl:6j+1NMOtEvwDpjrR2XabMQl

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_61f1d27da5ccdabfb55cbf301804945b_cryptolocker

    • Size

      44KB

    • MD5

      61f1d27da5ccdabfb55cbf301804945b

    • SHA1

      cf9ed1bbf4144a664c2b480ae3f7552497785d2f

    • SHA256

      0e39192616e6b8afce47c03fe13d3bb6877c6017b9d649c51786eba796a0640d

    • SHA512

      d65e1f290087aed450b667f4310924c890fe78cff0ea855d216792767771f364df287c939d5d94e575093e804d4b25ceea4bbb1df2e9bb4fa8ca0202df15a8ec

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0Dl:6j+1NMOtEvwDpjrR2XabMQl

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks