General

  • Target

    2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker

  • Size

    43KB

  • Sample

    240601-enmjzshd5x

  • MD5

    fd133ca2be3d23cb0eafe64682007aa6

  • SHA1

    39735a2064529a0ed19a8430418ef7510454c4cb

  • SHA256

    dccb07c155579c24ccb505a00e566295022b29cb343bd58b9acb18a62f5c2806

  • SHA512

    411d7497c35697cef036494c4fe4c6658ff736df532c26be25cb64914b05eaf7f20e93b8cd1457a3569385f3035d1516eef4aa68670528057901a1aeaf6f9ba6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0t:6j+1NMOtEvwDpjrR2XabMq

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker

    • Size

      43KB

    • MD5

      fd133ca2be3d23cb0eafe64682007aa6

    • SHA1

      39735a2064529a0ed19a8430418ef7510454c4cb

    • SHA256

      dccb07c155579c24ccb505a00e566295022b29cb343bd58b9acb18a62f5c2806

    • SHA512

      411d7497c35697cef036494c4fe4c6658ff736df532c26be25cb64914b05eaf7f20e93b8cd1457a3569385f3035d1516eef4aa68670528057901a1aeaf6f9ba6

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0t:6j+1NMOtEvwDpjrR2XabMq

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks