Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_0df14c98f6fce59583fa3f29315d9c20_cryptolocker

  • Size

    119KB

  • Sample

    240127-d9manscea7

  • MD5

    0df14c98f6fce59583fa3f29315d9c20

  • SHA1

    48b5259ef0154817b696b1138a80d9e5cce12a51

  • SHA256

    bf493e8e026004a486cf8f0002ccc218b23d2d1a08c74a8794c2cb958525c48c

  • SHA512

    ed9c5038ddfabbde260e5a810a84e3f31384602e267c2712c8e7edb2f0bb071ecac243f3327db4e2f07818795320687861e4617d09c14d40a0dd6d3fa424b2e4

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTU:gUj+AIMOtEvwDpjNbwQEIPlemUhYk

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_0df14c98f6fce59583fa3f29315d9c20_cryptolocker

    • Size

      119KB

    • MD5

      0df14c98f6fce59583fa3f29315d9c20

    • SHA1

      48b5259ef0154817b696b1138a80d9e5cce12a51

    • SHA256

      bf493e8e026004a486cf8f0002ccc218b23d2d1a08c74a8794c2cb958525c48c

    • SHA512

      ed9c5038ddfabbde260e5a810a84e3f31384602e267c2712c8e7edb2f0bb071ecac243f3327db4e2f07818795320687861e4617d09c14d40a0dd6d3fa424b2e4

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTU:gUj+AIMOtEvwDpjNbwQEIPlemUhYk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks