Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_56912a39c6ba3ee9ef207235852867d6_cryptolocker

  • Size

    35KB

  • Sample

    240128-v3d46agbdp

  • MD5

    56912a39c6ba3ee9ef207235852867d6

  • SHA1

    8783d57dfb4faedf23a2f14a990024b058194b99

  • SHA256

    9bfc0cfce952a83cf67d60419b3bca73113350633b83acedc057746ba640fd80

  • SHA512

    3bec2efb7e196194f073ba9d817fad19e554529c39a8923602bc3ab4e2ebcd990590ce7d6adb8d896ae04771428c6958284a51c4f1ea12f56220c0df85dba8b3

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAi:bA74zYcgT/Ekd0ryfj86U8zbCAi

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_56912a39c6ba3ee9ef207235852867d6_cryptolocker

    • Size

      35KB

    • MD5

      56912a39c6ba3ee9ef207235852867d6

    • SHA1

      8783d57dfb4faedf23a2f14a990024b058194b99

    • SHA256

      9bfc0cfce952a83cf67d60419b3bca73113350633b83acedc057746ba640fd80

    • SHA512

      3bec2efb7e196194f073ba9d817fad19e554529c39a8923602bc3ab4e2ebcd990590ce7d6adb8d896ae04771428c6958284a51c4f1ea12f56220c0df85dba8b3

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAi:bA74zYcgT/Ekd0ryfj86U8zbCAi

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks