Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_ce5b42eca3a51b7e490b1e8e0621974a_cryptolocker

  • Size

    40KB

  • Sample

    240212-welprscd38

  • MD5

    ce5b42eca3a51b7e490b1e8e0621974a

  • SHA1

    8b248c99c68619fecd4693a24886f30a38187c99

  • SHA256

    dc84f008b21ae702b988ac233f96892264bf7845fdf3fc5c2fd9dc117d4903a4

  • SHA512

    e1c3f8bc7b9d6d2321c5dc243948cdb1776cb3e1bb66a9f3d1d981cc7bded87d37697f0ced48662f8d0e3a4a4944db693f5c831ccb9c788809b093ee8c1b53fa

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAO:b/pYayGig5HjS3NPAO

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_ce5b42eca3a51b7e490b1e8e0621974a_cryptolocker

    • Size

      40KB

    • MD5

      ce5b42eca3a51b7e490b1e8e0621974a

    • SHA1

      8b248c99c68619fecd4693a24886f30a38187c99

    • SHA256

      dc84f008b21ae702b988ac233f96892264bf7845fdf3fc5c2fd9dc117d4903a4

    • SHA512

      e1c3f8bc7b9d6d2321c5dc243948cdb1776cb3e1bb66a9f3d1d981cc7bded87d37697f0ced48662f8d0e3a4a4944db693f5c831ccb9c788809b093ee8c1b53fa

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAO:b/pYayGig5HjS3NPAO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks