Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-17_161af5987bc1eaf182a4bc979713219b_cryptolocker

  • Size

    35KB

  • Sample

    240217-qnm2asfg68

  • MD5

    161af5987bc1eaf182a4bc979713219b

  • SHA1

    248d55e105ab435c27bcb66efdfda596a2710041

  • SHA256

    849834ffc9bb93b4ef38c28c38d0f62a374a41dc216e7982d57ef96f3177e71c

  • SHA512

    978f88074d8200712f5a3fcab50d411d0c0053c9790cb7174d81ad7e6912287fd3552c88279de674750f575fb7e544d5029b61f41f69fe95f13ed536c960e694

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18uuuT:btB9g/WItCSsAGjX7e9NABT

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_161af5987bc1eaf182a4bc979713219b_cryptolocker

    • Size

      35KB

    • MD5

      161af5987bc1eaf182a4bc979713219b

    • SHA1

      248d55e105ab435c27bcb66efdfda596a2710041

    • SHA256

      849834ffc9bb93b4ef38c28c38d0f62a374a41dc216e7982d57ef96f3177e71c

    • SHA512

      978f88074d8200712f5a3fcab50d411d0c0053c9790cb7174d81ad7e6912287fd3552c88279de674750f575fb7e544d5029b61f41f69fe95f13ed536c960e694

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18uuuT:btB9g/WItCSsAGjX7e9NABT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks