Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-17_06df86feb53b4cf9a6dc9af539983b52_cryptolocker

  • Size

    385KB

  • Sample

    240217-ye1vssag66

  • MD5

    06df86feb53b4cf9a6dc9af539983b52

  • SHA1

    5f8d5a4944f1499cd556dc14fdac7dcb7f45299b

  • SHA256

    c19939c54a71deb937590cfd08af83992133622ee01a88e7dffb069c992c08ea

  • SHA512

    865c414b8e152d51beb360650703a982a9d02624247f33070cd473f38ab2b9825ebc34ff73f583126580b3db80aa744a5d2470f082c4fc3591ddec3ce4131a7c

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXV:nnOflT/ZFIjBz3xjTxynGUOUhXV

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_06df86feb53b4cf9a6dc9af539983b52_cryptolocker

    • Size

      385KB

    • MD5

      06df86feb53b4cf9a6dc9af539983b52

    • SHA1

      5f8d5a4944f1499cd556dc14fdac7dcb7f45299b

    • SHA256

      c19939c54a71deb937590cfd08af83992133622ee01a88e7dffb069c992c08ea

    • SHA512

      865c414b8e152d51beb360650703a982a9d02624247f33070cd473f38ab2b9825ebc34ff73f583126580b3db80aa744a5d2470f082c4fc3591ddec3ce4131a7c

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXV:nnOflT/ZFIjBz3xjTxynGUOUhXV

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks