Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_03638521e489aa51faba35f2bb44231b_cryptolocker

  • Size

    385KB

  • Sample

    240214-rpwv9sda3s

  • MD5

    03638521e489aa51faba35f2bb44231b

  • SHA1

    e6bed068015c7aed5a88674a69883e66ec6b2315

  • SHA256

    199016391b0a7086595e1c5f2f5059e4602d6cbdd86d5ef65847ce0d6dfd1f4e

  • SHA512

    1eacb273d4809fb5dca08381219023255ae94a2a3caded0bdcbb51e4e31224cb1de8e815355e7fc5fddef086ddbe13cafd1291d445427dc73aef25045dc02754

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXx:nnOflT/ZFIjBz3xjTxynGUOUhXx

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_03638521e489aa51faba35f2bb44231b_cryptolocker

    • Size

      385KB

    • MD5

      03638521e489aa51faba35f2bb44231b

    • SHA1

      e6bed068015c7aed5a88674a69883e66ec6b2315

    • SHA256

      199016391b0a7086595e1c5f2f5059e4602d6cbdd86d5ef65847ce0d6dfd1f4e

    • SHA512

      1eacb273d4809fb5dca08381219023255ae94a2a3caded0bdcbb51e4e31224cb1de8e815355e7fc5fddef086ddbe13cafd1291d445427dc73aef25045dc02754

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXx:nnOflT/ZFIjBz3xjTxynGUOUhXx

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks