Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-03_cfff32166dbddcaaea244c5fe03f54c4_cryptolocker

  • Size

    36KB

  • Sample

    240203-gd99eaadf3

  • MD5

    cfff32166dbddcaaea244c5fe03f54c4

  • SHA1

    e60aa66410b6fb716835332b5b38dc9d103c2183

  • SHA256

    ca17327fb0d3fe1222764e59436e97d3203dfc41d124c22122e64435bacb707a

  • SHA512

    88263ee8c227848827b015427e9f218797c4b15af769ee603fccc25e16afd67e18b9ca736e789d8e14cb990b7976b0fd1e69830a5c72e365c86e47e87b2f3469

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nbyx:bAvJCYOOvbRPDEgXrNekd7l94i3pyx

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_cfff32166dbddcaaea244c5fe03f54c4_cryptolocker

    • Size

      36KB

    • MD5

      cfff32166dbddcaaea244c5fe03f54c4

    • SHA1

      e60aa66410b6fb716835332b5b38dc9d103c2183

    • SHA256

      ca17327fb0d3fe1222764e59436e97d3203dfc41d124c22122e64435bacb707a

    • SHA512

      88263ee8c227848827b015427e9f218797c4b15af769ee603fccc25e16afd67e18b9ca736e789d8e14cb990b7976b0fd1e69830a5c72e365c86e47e87b2f3469

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nbyx:bAvJCYOOvbRPDEgXrNekd7l94i3pyx

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks