Overview

overview

10

Static

static

10

2024-02-13...er.exe

windows7-x64

9

2024-02-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-13_23e9c49d5d924be2813d1f800e99fed8_cryptolocker

  • Size

    73KB

  • Sample

    240213-a3arhsfd3t

  • MD5

    23e9c49d5d924be2813d1f800e99fed8

  • SHA1

    5a62a1c85f33162caf8187d7caf28074925c7140

  • SHA256

    c1f614bbe53b475b11de7ab0c34bc010d1123d68ccb47230ea58923b39577cd1

  • SHA512

    fbce30c24434d0b5344598559ef48521b2ddfa246399a47817fbe90816ef509597582ed809c4b8e34cd26f88bf8aa463b8eaa6f97dc4bf946a829b36bfee4dfd

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMB:X6a+SOtEvwDpjBZYvQd2e

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_23e9c49d5d924be2813d1f800e99fed8_cryptolocker

    • Size

      73KB

    • MD5

      23e9c49d5d924be2813d1f800e99fed8

    • SHA1

      5a62a1c85f33162caf8187d7caf28074925c7140

    • SHA256

      c1f614bbe53b475b11de7ab0c34bc010d1123d68ccb47230ea58923b39577cd1

    • SHA512

      fbce30c24434d0b5344598559ef48521b2ddfa246399a47817fbe90816ef509597582ed809c4b8e34cd26f88bf8aa463b8eaa6f97dc4bf946a829b36bfee4dfd

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMB:X6a+SOtEvwDpjBZYvQd2e

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks