General

  • Target

    2024-05-22_c7c1b2cdeeb12d492764977c59076e43_cryptolocker

  • Size

    86KB

  • Sample

    240522-dbp9nsab4y

  • MD5

    c7c1b2cdeeb12d492764977c59076e43

  • SHA1

    2ac3336dd79c563ff6b1d6020816320b991dd977

  • SHA256

    377239cc0545df11ca695319116493b8e629b140a4d3200c011411013e36940e

  • SHA512

    a25ef4e5550ee3b8b6a56bb9d9a216a2f4192eaddcdd16ca9b3650d47e106d0e022375909dad15cd55130f38d835002c11a8d81edf0c401f0ee66bd1c930dff6

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBdj:vCjsIOtEvwDpj5H9YvQd25

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_c7c1b2cdeeb12d492764977c59076e43_cryptolocker

    • Size

      86KB

    • MD5

      c7c1b2cdeeb12d492764977c59076e43

    • SHA1

      2ac3336dd79c563ff6b1d6020816320b991dd977

    • SHA256

      377239cc0545df11ca695319116493b8e629b140a4d3200c011411013e36940e

    • SHA512

      a25ef4e5550ee3b8b6a56bb9d9a216a2f4192eaddcdd16ca9b3650d47e106d0e022375909dad15cd55130f38d835002c11a8d81edf0c401f0ee66bd1c930dff6

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBdj:vCjsIOtEvwDpj5H9YvQd25

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks