Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_337bb7b0be5be8891e8143b14b980bcc_cryptolocker

  • Size

    385KB

  • Sample

    240219-je4jcsbb99

  • MD5

    337bb7b0be5be8891e8143b14b980bcc

  • SHA1

    6fb61e2143c955fa583a03d8a49597c32a89f063

  • SHA256

    8dd088827733a2b4533615d560789019dcfa7f7ada60eabe885eddc90f3418e2

  • SHA512

    30bcd64585521dcdd8527ab154d9fa167773bbbdd4fa3390a749e6b3422f27ecc5b684d61d86c179ae5587082a38b29ed1d7cfe4d5dd1ec5fd5d8e654ca01f4e

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXt:nnOflT/ZFIjBz3xjTxynGUOUhXt

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_337bb7b0be5be8891e8143b14b980bcc_cryptolocker

    • Size

      385KB

    • MD5

      337bb7b0be5be8891e8143b14b980bcc

    • SHA1

      6fb61e2143c955fa583a03d8a49597c32a89f063

    • SHA256

      8dd088827733a2b4533615d560789019dcfa7f7ada60eabe885eddc90f3418e2

    • SHA512

      30bcd64585521dcdd8527ab154d9fa167773bbbdd4fa3390a749e6b3422f27ecc5b684d61d86c179ae5587082a38b29ed1d7cfe4d5dd1ec5fd5d8e654ca01f4e

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXt:nnOflT/ZFIjBz3xjTxynGUOUhXt

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks