Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_77c6cde61086f861ce5dc97ad5189c86_cryptolocker

  • Size

    62KB

  • Sample

    240204-atts2adcb7

  • MD5

    77c6cde61086f861ce5dc97ad5189c86

  • SHA1

    57b41e6aab7895c4b55250a3a9044810b63b399c

  • SHA256

    0075b9a8cf75c63fb43d9f6a005e25fe8afaf3e5194cc9c15d13cf28a927c397

  • SHA512

    c17d7dab0c3f2a474c8a2bde58bdab6733ef6c948b04f1dffe554b364dbf943fbb06ef82237307edb2f95260c36926a89865e103c68c0f7ac11a089d525e3414

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMR:TCjsIOtEvwDpj5HE/OUHnSMK

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_77c6cde61086f861ce5dc97ad5189c86_cryptolocker

    • Size

      62KB

    • MD5

      77c6cde61086f861ce5dc97ad5189c86

    • SHA1

      57b41e6aab7895c4b55250a3a9044810b63b399c

    • SHA256

      0075b9a8cf75c63fb43d9f6a005e25fe8afaf3e5194cc9c15d13cf28a927c397

    • SHA512

      c17d7dab0c3f2a474c8a2bde58bdab6733ef6c948b04f1dffe554b364dbf943fbb06ef82237307edb2f95260c36926a89865e103c68c0f7ac11a089d525e3414

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMR:TCjsIOtEvwDpj5HE/OUHnSMK

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks