Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_00a75082c15a761178c44c4ef090a619_cryptolocker

  • Size

    37KB

  • Sample

    240212-yerxwsch77

  • MD5

    00a75082c15a761178c44c4ef090a619

  • SHA1

    0b19c174345912fa6f8353435d70c6a69cede34f

  • SHA256

    70f643c5d2ef3db8cec427e3c8da7b8b3d0996b440470999b3934bc0afb62d2d

  • SHA512

    c6bd79bd01903949219e62eec40e04487fe940f3abd53ae9918ee841688a72f16d8f95a1fff0e1fb21d90605b71010791d5fe9527e6b8842c68de81feddd4285

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/0j:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/A

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_00a75082c15a761178c44c4ef090a619_cryptolocker

    • Size

      37KB

    • MD5

      00a75082c15a761178c44c4ef090a619

    • SHA1

      0b19c174345912fa6f8353435d70c6a69cede34f

    • SHA256

      70f643c5d2ef3db8cec427e3c8da7b8b3d0996b440470999b3934bc0afb62d2d

    • SHA512

      c6bd79bd01903949219e62eec40e04487fe940f3abd53ae9918ee841688a72f16d8f95a1fff0e1fb21d90605b71010791d5fe9527e6b8842c68de81feddd4285

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/0j:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/A

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks