General

  • Target

    2024-05-22_2219e4e87571069a29732df269d7d95a_cryptolocker

  • Size

    41KB

  • Sample

    240522-2bzp4sbb5w

  • MD5

    2219e4e87571069a29732df269d7d95a

  • SHA1

    5bab695426787080020e2602dde8d4d713f998ff

  • SHA256

    0f74f0e7dd2515dbe867411ea457e8419aca05d86543cb88db0ad42b8f1b6040

  • SHA512

    15db488d177c2caca8b756924b8d6bb849b3c74ca1cc9fb92a971f901a5bf3eb709cd4fad5cf21496bcdb1e55730e568689b37fac408f7ef85a28dd8d57e9cb8

  • SSDEEP

    768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCi:bA6YcA/X6G0W143QB

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_2219e4e87571069a29732df269d7d95a_cryptolocker

    • Size

      41KB

    • MD5

      2219e4e87571069a29732df269d7d95a

    • SHA1

      5bab695426787080020e2602dde8d4d713f998ff

    • SHA256

      0f74f0e7dd2515dbe867411ea457e8419aca05d86543cb88db0ad42b8f1b6040

    • SHA512

      15db488d177c2caca8b756924b8d6bb849b3c74ca1cc9fb92a971f901a5bf3eb709cd4fad5cf21496bcdb1e55730e568689b37fac408f7ef85a28dd8d57e9cb8

    • SSDEEP

      768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCi:bA6YcA/X6G0W143QB

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks