Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_a5436197fe63a3f4144c878173b96272_cryptolocker

  • Size

    33KB

  • Sample

    240212-w4p4gsce92

  • MD5

    a5436197fe63a3f4144c878173b96272

  • SHA1

    d09d4d8cd86f4cf9e8fb73ae6562702ef76d0725

  • SHA256

    1da16a249af31cc3fbdcbf4a2196934e21958649428ef44c953c3eef92e4ae0c

  • SHA512

    74d79fadf6eb515f85989c569d17a2a9425b1be8bebf992c30420512609cc1812cb3813d758fca959be94b18cb28f4eb64a9102861e156fc0c39cd40750e97a3

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q5:b7o/2n1TCraU6GD1a4Xt9bRU65

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_a5436197fe63a3f4144c878173b96272_cryptolocker

    • Size

      33KB

    • MD5

      a5436197fe63a3f4144c878173b96272

    • SHA1

      d09d4d8cd86f4cf9e8fb73ae6562702ef76d0725

    • SHA256

      1da16a249af31cc3fbdcbf4a2196934e21958649428ef44c953c3eef92e4ae0c

    • SHA512

      74d79fadf6eb515f85989c569d17a2a9425b1be8bebf992c30420512609cc1812cb3813d758fca959be94b18cb28f4eb64a9102861e156fc0c39cd40750e97a3

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q5:b7o/2n1TCraU6GD1a4Xt9bRU65

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks