Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_abb793c8ec50f7fd7646e1b15959e011_cryptolocker

  • Size

    31KB

  • Sample

    240126-tzwdlabcbk

  • MD5

    abb793c8ec50f7fd7646e1b15959e011

  • SHA1

    709848602e28a035365267e99cbf6f2ced10c0b7

  • SHA256

    00268f46e0f65f1ed5d274f80b0581af3dad0103b01b3a8cdb8feb24abfa48e8

  • SHA512

    160cc46cf49ed23b841db9f4b0fd9c3b0364fc31b101ae48a6fb61ba5a01346063dea78f9ffa6a21dacee03f48088a7332c251bd2fc6df39aef018c2bb6e1bcd

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM93cz:bAvJCYOOvbRPDEgXRcuM9A

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_abb793c8ec50f7fd7646e1b15959e011_cryptolocker

    • Size

      31KB

    • MD5

      abb793c8ec50f7fd7646e1b15959e011

    • SHA1

      709848602e28a035365267e99cbf6f2ced10c0b7

    • SHA256

      00268f46e0f65f1ed5d274f80b0581af3dad0103b01b3a8cdb8feb24abfa48e8

    • SHA512

      160cc46cf49ed23b841db9f4b0fd9c3b0364fc31b101ae48a6fb61ba5a01346063dea78f9ffa6a21dacee03f48088a7332c251bd2fc6df39aef018c2bb6e1bcd

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM93cz:bAvJCYOOvbRPDEgXRcuM9A

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks