Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-29_a0e8856576d527aecd11f7fe13a1fa5a_cryptolocker

  • Size

    41KB

  • Sample

    240129-tddawsehcp

  • MD5

    a0e8856576d527aecd11f7fe13a1fa5a

  • SHA1

    647443957c60c66b3a1c1c321d68a5446b57bda0

  • SHA256

    d165abe105ed88589836b75294a7dcd33cb3961c5210d8e6ef1108f2fe39d67c

  • SHA512

    6b0277956b176612dadc181d92c237047ce9d5d871c6e0c9b846b6b31e3cccdf69df7f1a1f52e31ecb401a82a0c7a335e539b3999528a67f3294e750dcbdb46a

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp1e:bxNrC7kYo1Fxf3s05rwxbF7e

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_a0e8856576d527aecd11f7fe13a1fa5a_cryptolocker

    • Size

      41KB

    • MD5

      a0e8856576d527aecd11f7fe13a1fa5a

    • SHA1

      647443957c60c66b3a1c1c321d68a5446b57bda0

    • SHA256

      d165abe105ed88589836b75294a7dcd33cb3961c5210d8e6ef1108f2fe39d67c

    • SHA512

      6b0277956b176612dadc181d92c237047ce9d5d871c6e0c9b846b6b31e3cccdf69df7f1a1f52e31ecb401a82a0c7a335e539b3999528a67f3294e750dcbdb46a

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp1e:bxNrC7kYo1Fxf3s05rwxbF7e

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks