Overview

overview

10

Static

static

10

2024-02-23...er.exe

windows7-x64

9

2024-02-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-23_d40b50ba78ffa063f3e444546e5e2dc4_cryptolocker

  • Size

    34KB

  • Sample

    240223-zp85lagh75

  • MD5

    d40b50ba78ffa063f3e444546e5e2dc4

  • SHA1

    26023ef9a864f745c0c71f9760b05867a6959ab8

  • SHA256

    9f8711a99f849daa532f2a780dd7b4ce4c15c43833ce2c5bfbb29ea0ae341ad6

  • SHA512

    17f8d3b169ad36c89259fe48493035781de4207d09e8ac77d04eacbeee885a05c751aa83e1a767cd31df53f953617fe886f92b3bffbed07596799734694723a1

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZQYfI:b/yC4GyNM01GuQMNXw2PSj1POV

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_d40b50ba78ffa063f3e444546e5e2dc4_cryptolocker

    • Size

      34KB

    • MD5

      d40b50ba78ffa063f3e444546e5e2dc4

    • SHA1

      26023ef9a864f745c0c71f9760b05867a6959ab8

    • SHA256

      9f8711a99f849daa532f2a780dd7b4ce4c15c43833ce2c5bfbb29ea0ae341ad6

    • SHA512

      17f8d3b169ad36c89259fe48493035781de4207d09e8ac77d04eacbeee885a05c751aa83e1a767cd31df53f953617fe886f92b3bffbed07596799734694723a1

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn1KkZQYfI:b/yC4GyNM01GuQMNXw2PSj1POV

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks