General

  • Target

    2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker

  • Size

    34KB

  • Sample

    240608-ytyzraff2s

  • MD5

    fb16f28bdbde027a1e88bb8a0ba160d7

  • SHA1

    7d2615c147f891a518b2267e742c258bc96a02d3

  • SHA256

    c5275c26ecbb8df8b8ef2bc6edaab989b03c344e6a1f6ded8e7a9a539e575486

  • SHA512

    b351fe7de9d012801ea109c3cee90b5892cd56bac64a2939d8e7c43dc75a15b851bd3cf68f0121126ccbd13e7741e57abc0207c67a9b627577e5de8ff1f92acc

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjSKkcJR549Xo:b/pYayGig5Sn+5yY

Score
10/10

Malware Config

Targets

    • Target

      2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker

    • Size

      34KB

    • MD5

      fb16f28bdbde027a1e88bb8a0ba160d7

    • SHA1

      7d2615c147f891a518b2267e742c258bc96a02d3

    • SHA256

      c5275c26ecbb8df8b8ef2bc6edaab989b03c344e6a1f6ded8e7a9a539e575486

    • SHA512

      b351fe7de9d012801ea109c3cee90b5892cd56bac64a2939d8e7c43dc75a15b851bd3cf68f0121126ccbd13e7741e57abc0207c67a9b627577e5de8ff1f92acc

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjSKkcJR549Xo:b/pYayGig5Sn+5yY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks