Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_df979abb2dc9578d52cbabd4c75bc563_cryptolocker

  • Size

    52KB

  • Sample

    240222-rp1t8aah7x

  • MD5

    df979abb2dc9578d52cbabd4c75bc563

  • SHA1

    930d23d77eef96d898a06bf94db4a729f4a9c6eb

  • SHA256

    273276274b148c9c2918efe930d314a84e95ce199acb6657440f986199c68d5e

  • SHA512

    d5b3b8bb60fc4918ef95ec9ab497253c6acf2f44614ec4ea1b0fff1156b3c12aee431b91e101f511759c49e2cd8c19cc9e22c9d9d055d2752bb85e0f584f41da

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTymd:bIDOw9a0DwitDZzcT2d

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_df979abb2dc9578d52cbabd4c75bc563_cryptolocker

    • Size

      52KB

    • MD5

      df979abb2dc9578d52cbabd4c75bc563

    • SHA1

      930d23d77eef96d898a06bf94db4a729f4a9c6eb

    • SHA256

      273276274b148c9c2918efe930d314a84e95ce199acb6657440f986199c68d5e

    • SHA512

      d5b3b8bb60fc4918ef95ec9ab497253c6acf2f44614ec4ea1b0fff1156b3c12aee431b91e101f511759c49e2cd8c19cc9e22c9d9d055d2752bb85e0f584f41da

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTymd:bIDOw9a0DwitDZzcT2d

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks