Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-28_9e889bb62157d26f31e9b31ceb21426d_cryptolocker

  • Size

    64KB

  • Sample

    240128-rs8z1adgaj

  • MD5

    9e889bb62157d26f31e9b31ceb21426d

  • SHA1

    bf580658d84e7e0cd1d657fae0d4c12149fec1ba

  • SHA256

    c0373bc9b48ceb23af6f3fd3f380597d8dd31d24e95a4a0905c6168c99f7c673

  • SHA512

    bf48cad8c560ba0a237075392a3413404de77e579896bb84bfa910638cf2cb307b0e316e8e6c203d92d631eec950240aa421bf6d2f1f20144c71d879c9f150ff

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVi:ZVxkGOtEvwDpjcaw8

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_9e889bb62157d26f31e9b31ceb21426d_cryptolocker

    • Size

      64KB

    • MD5

      9e889bb62157d26f31e9b31ceb21426d

    • SHA1

      bf580658d84e7e0cd1d657fae0d4c12149fec1ba

    • SHA256

      c0373bc9b48ceb23af6f3fd3f380597d8dd31d24e95a4a0905c6168c99f7c673

    • SHA512

      bf48cad8c560ba0a237075392a3413404de77e579896bb84bfa910638cf2cb307b0e316e8e6c203d92d631eec950240aa421bf6d2f1f20144c71d879c9f150ff

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVi:ZVxkGOtEvwDpjcaw8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks