Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_3bda04f6a1d6d3542c6246d5654718b5_cryptolocker

  • Size

    40KB

  • Sample

    240219-nmyqasdb29

  • MD5

    3bda04f6a1d6d3542c6246d5654718b5

  • SHA1

    37dacbb9c972a32fcc2a60531ebe686aa842d17e

  • SHA256

    b251ff81131c396642cf36021b798e141c22fadd0a3b7ed5260e93535065c032

  • SHA512

    20049f08b06172f061bcda8799b231a77916cadb3fcf27bc55ace1ab80c6a162551f6df686055e68edda0cef334613a1cab6fad4699837f813ba4b94b05e39f6

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKJ:bIDOw9a0Dwo3P1ojvUSDhr

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_3bda04f6a1d6d3542c6246d5654718b5_cryptolocker

    • Size

      40KB

    • MD5

      3bda04f6a1d6d3542c6246d5654718b5

    • SHA1

      37dacbb9c972a32fcc2a60531ebe686aa842d17e

    • SHA256

      b251ff81131c396642cf36021b798e141c22fadd0a3b7ed5260e93535065c032

    • SHA512

      20049f08b06172f061bcda8799b231a77916cadb3fcf27bc55ace1ab80c6a162551f6df686055e68edda0cef334613a1cab6fad4699837f813ba4b94b05e39f6

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKJ:bIDOw9a0Dwo3P1ojvUSDhr

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks