Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-03_0195a1aaf163dbae54f31536532b5f18_cryptolocker

  • Size

    32KB

  • Sample

    240203-qmadtaabe2

  • MD5

    0195a1aaf163dbae54f31536532b5f18

  • SHA1

    473ff97340c37383c35c965dfec489d2210ffeaa

  • SHA256

    fa1342ba5888f7dce7ec3a823758efc06dd3245b65e5754bfd5c255e248db4e5

  • SHA512

    d302a10e5a353aa448b11595bf1c417b51421bb4845a92d93fcbd136cc4c10f568b018f81b097163269abf90562f33b121ea4442a30f627db683f8afa5a12fe9

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qK:b7o/2n1TCraU6GD1a4Xt9bRU6K

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_0195a1aaf163dbae54f31536532b5f18_cryptolocker

    • Size

      32KB

    • MD5

      0195a1aaf163dbae54f31536532b5f18

    • SHA1

      473ff97340c37383c35c965dfec489d2210ffeaa

    • SHA256

      fa1342ba5888f7dce7ec3a823758efc06dd3245b65e5754bfd5c255e248db4e5

    • SHA512

      d302a10e5a353aa448b11595bf1c417b51421bb4845a92d93fcbd136cc4c10f568b018f81b097163269abf90562f33b121ea4442a30f627db683f8afa5a12fe9

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qK:b7o/2n1TCraU6GD1a4Xt9bRU6K

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks