General

  • Target

    2024-06-08_24bdc77e529582b9de31a0ef45f230a6_cryptolocker

  • Size

    47KB

  • Sample

    240608-ynjmwafd9v

  • MD5

    24bdc77e529582b9de31a0ef45f230a6

  • SHA1

    b7add75ee1c3e6d732cfcb11ed8a1c0cb7366088

  • SHA256

    d18250621dd5a55ec36ae6ebcc710c07e219d861cfa1a91d9a1219e7f63d8c89

  • SHA512

    2b5e974104628793104d3753f4c6b9336bf525f735c91f5aac867dddf09e1f35e15e990f67c48f52984f8f7c5ed4047c165cb35c0f7660b524e26c9147a85662

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhwl/:xj+VGMOtEvwDpjy+TRhQ/

Score
10/10

Malware Config

Targets

    • Target

      2024-06-08_24bdc77e529582b9de31a0ef45f230a6_cryptolocker

    • Size

      47KB

    • MD5

      24bdc77e529582b9de31a0ef45f230a6

    • SHA1

      b7add75ee1c3e6d732cfcb11ed8a1c0cb7366088

    • SHA256

      d18250621dd5a55ec36ae6ebcc710c07e219d861cfa1a91d9a1219e7f63d8c89

    • SHA512

      2b5e974104628793104d3753f4c6b9336bf525f735c91f5aac867dddf09e1f35e15e990f67c48f52984f8f7c5ed4047c165cb35c0f7660b524e26c9147a85662

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhwl/:xj+VGMOtEvwDpjy+TRhQ/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks