Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_0e5b677afe2313f6b5bfbe2377828c66_cryptolocker

  • Size

    38KB

  • Sample

    240214-rcfzaace9w

  • MD5

    0e5b677afe2313f6b5bfbe2377828c66

  • SHA1

    b637437437285022fad93d6dac384ebc9d8ec6d0

  • SHA256

    7b76e2af2b98a0bab52f6b0b0d4ebedee24d3fdbbfcf247a7b34517ea646c2fc

  • SHA512

    a6927f9e9893ec7ed988337a24afa7cea4194461570d32b0e3b2bdee68ac612eff0933bd52c9485bcbcb1f58780fa1a82904404063a7cdac9b96e461729bed9a

  • SSDEEP

    768:bAvJCYOOvbRPDEgXrNekd7l94i3py/d1U:bAvJCF+RQgJeab4sy/dy

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_0e5b677afe2313f6b5bfbe2377828c66_cryptolocker

    • Size

      38KB

    • MD5

      0e5b677afe2313f6b5bfbe2377828c66

    • SHA1

      b637437437285022fad93d6dac384ebc9d8ec6d0

    • SHA256

      7b76e2af2b98a0bab52f6b0b0d4ebedee24d3fdbbfcf247a7b34517ea646c2fc

    • SHA512

      a6927f9e9893ec7ed988337a24afa7cea4194461570d32b0e3b2bdee68ac612eff0933bd52c9485bcbcb1f58780fa1a82904404063a7cdac9b96e461729bed9a

    • SSDEEP

      768:bAvJCYOOvbRPDEgXrNekd7l94i3py/d1U:bAvJCF+RQgJeab4sy/dy

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks