Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-03_2542dd43ade3a12eab959cb6006548b2_cryptolocker

  • Size

    44KB

  • Sample

    240203-nhxbnsfgf9

  • MD5

    2542dd43ade3a12eab959cb6006548b2

  • SHA1

    9edd9d524c38a9789f4e41b00e9008e814875422

  • SHA256

    6f7d6b44201f472198e1abbccdcde6742f678b4eef1784847255726ee7f99894

  • SHA512

    fa077c55d62adf81fac1221224095ddfc10763a3ddc352aee1c2bd3d075d99be1e0df80a1e3ad92eac98d8be8ddfc3c4386d29128f35884c1790ff9d48b3c0f1

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuCmO:bIDOw9a0Dwo3P1ojvUSD4PInrmO

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_2542dd43ade3a12eab959cb6006548b2_cryptolocker

    • Size

      44KB

    • MD5

      2542dd43ade3a12eab959cb6006548b2

    • SHA1

      9edd9d524c38a9789f4e41b00e9008e814875422

    • SHA256

      6f7d6b44201f472198e1abbccdcde6742f678b4eef1784847255726ee7f99894

    • SHA512

      fa077c55d62adf81fac1221224095ddfc10763a3ddc352aee1c2bd3d075d99be1e0df80a1e3ad92eac98d8be8ddfc3c4386d29128f35884c1790ff9d48b3c0f1

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuCmO:bIDOw9a0Dwo3P1ojvUSD4PInrmO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks