General

  • Target

    2024-06-20_38c2796ddbc4d2a63e66bf6e8e14d6f6_cryptolocker

  • Size

    38KB

  • Sample

    240620-nh736svcrd

  • MD5

    38c2796ddbc4d2a63e66bf6e8e14d6f6

  • SHA1

    f83360ab89257c3840386de57377036db3666c2a

  • SHA256

    6b4e14c94eee0e17238c143daafc7fe8774a28a63998490aa31eebbbc432bc86

  • SHA512

    12ec4c6af320dfaa823b9d40d159d074d0a8a036d4b18108301cede2d534f242bf0ed864d153447da9fd59e573d66edc21eb09e583b09791f2f1536f0cc86dbb

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4XYNS:fT+hsMQMOtEvwDpjoIHIM

Score
10/10

Malware Config

Targets

    • Target

      2024-06-20_38c2796ddbc4d2a63e66bf6e8e14d6f6_cryptolocker

    • Size

      38KB

    • MD5

      38c2796ddbc4d2a63e66bf6e8e14d6f6

    • SHA1

      f83360ab89257c3840386de57377036db3666c2a

    • SHA256

      6b4e14c94eee0e17238c143daafc7fe8774a28a63998490aa31eebbbc432bc86

    • SHA512

      12ec4c6af320dfaa823b9d40d159d074d0a8a036d4b18108301cede2d534f242bf0ed864d153447da9fd59e573d66edc21eb09e583b09791f2f1536f0cc86dbb

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4XYNS:fT+hsMQMOtEvwDpjoIHIM

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks