General

  • Target

    2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker

  • Size

    87KB

  • Sample

    240601-q1h8wadg6v

  • MD5

    d84798cddf27a0aa11469bb3e63cb65c

  • SHA1

    ca2e54e6a06623eb705a3b1c03bfdde624f87020

  • SHA256

    d3773c1be96aeaed7e1692f0ba92f1d4266b5cf048b7370439e2e6525475ed87

  • SHA512

    97a32568de7e56f142171e6135f02e700e1a716682601abed1cbea22dbda7a68db201b620ba580772b7af3ffb27aea704014e54277f740557d49708457e13b4e

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6az:V6a+pOtEvwDpjvpn

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker

    • Size

      87KB

    • MD5

      d84798cddf27a0aa11469bb3e63cb65c

    • SHA1

      ca2e54e6a06623eb705a3b1c03bfdde624f87020

    • SHA256

      d3773c1be96aeaed7e1692f0ba92f1d4266b5cf048b7370439e2e6525475ed87

    • SHA512

      97a32568de7e56f142171e6135f02e700e1a716682601abed1cbea22dbda7a68db201b620ba580772b7af3ffb27aea704014e54277f740557d49708457e13b4e

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6az:V6a+pOtEvwDpjvpn

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks