General

  • Target

    2024-05-22_c13c0afcf65a565182b42e3623ed08b8_cryptolocker

  • Size

    97KB

  • Sample

    240522-zjfwvsga73

  • MD5

    c13c0afcf65a565182b42e3623ed08b8

  • SHA1

    61632a4ce65a625bfb2d54826f20f18deb77a15e

  • SHA256

    2c041290af3065de684abf80811a809cbe3684f14ccad26132d132bda4427a7c

  • SHA512

    68e9811fecac47cecfb6f052afd3f2c9d1337a3ad2f1b28566a05ce362ec862cec3e24943d02632b76697ccde088d66d4104eae0dcf0c4c540c4428c59b0a23e

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0I:V6a+pOtEvwDpjtzw

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_c13c0afcf65a565182b42e3623ed08b8_cryptolocker

    • Size

      97KB

    • MD5

      c13c0afcf65a565182b42e3623ed08b8

    • SHA1

      61632a4ce65a625bfb2d54826f20f18deb77a15e

    • SHA256

      2c041290af3065de684abf80811a809cbe3684f14ccad26132d132bda4427a7c

    • SHA512

      68e9811fecac47cecfb6f052afd3f2c9d1337a3ad2f1b28566a05ce362ec862cec3e24943d02632b76697ccde088d66d4104eae0dcf0c4c540c4428c59b0a23e

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0I:V6a+pOtEvwDpjtzw

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks