Overview

overview

10

Static

static

10

2024-02-21...er.exe

windows7-x64

9

2024-02-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-21_0a63126f4b33c726c34bc5cbfc756420_cryptolocker

  • Size

    32KB

  • Sample

    240221-y6mggsfd25

  • MD5

    0a63126f4b33c726c34bc5cbfc756420

  • SHA1

    97f6a6784fc2782fd7b16ff42a39b84d93022e3c

  • SHA256

    588b27ea79d8d6684c3a173a30e3f4aa2deb3a6f1a0fbc99de8e882e2983eaec

  • SHA512

    9cc7cc8268fd2769d2bd581783362cdb1bda8c51c8ec473f7ea474dc57f23307055b32a696752d962b4bfd847e03ce6329dc367e647665b341559840243ea1ab

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1MI:b7o/2n1TCraU6GD1a4Xt9g

Score
10/10

Malware Config

Targets

    • Target

      2024-02-21_0a63126f4b33c726c34bc5cbfc756420_cryptolocker

    • Size

      32KB

    • MD5

      0a63126f4b33c726c34bc5cbfc756420

    • SHA1

      97f6a6784fc2782fd7b16ff42a39b84d93022e3c

    • SHA256

      588b27ea79d8d6684c3a173a30e3f4aa2deb3a6f1a0fbc99de8e882e2983eaec

    • SHA512

      9cc7cc8268fd2769d2bd581783362cdb1bda8c51c8ec473f7ea474dc57f23307055b32a696752d962b4bfd847e03ce6329dc367e647665b341559840243ea1ab

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1MI:b7o/2n1TCraU6GD1a4Xt9g

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks