Overview

overview

10

Static

static

10

2024-02-25...er.exe

windows7-x64

9

2024-02-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-25_f781ca23a91095d688d5ef2e3fe78777_cryptolocker

  • Size

    32KB

  • Sample

    240225-jmc2dafg9y

  • MD5

    f781ca23a91095d688d5ef2e3fe78777

  • SHA1

    867a02d7ee84770d1072fbca74f0d9fbb3a29224

  • SHA256

    f55c317c93d2c1d06820cd9c0196b150afa9ada200d4dee42f03b7704dbb9368

  • SHA512

    bf4e99f283d73df5b1b7c79226159c82aae6d4b910cde02bc746e7737b564fb14e1bcd51df40b16a0ba278524adc0db14a55cff7259db05c78e6e1417d8389d7

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1Pj:b7o/2n1TCraU6GD1a4Xt9G

Score
10/10

Malware Config

Targets

    • Target

      2024-02-25_f781ca23a91095d688d5ef2e3fe78777_cryptolocker

    • Size

      32KB

    • MD5

      f781ca23a91095d688d5ef2e3fe78777

    • SHA1

      867a02d7ee84770d1072fbca74f0d9fbb3a29224

    • SHA256

      f55c317c93d2c1d06820cd9c0196b150afa9ada200d4dee42f03b7704dbb9368

    • SHA512

      bf4e99f283d73df5b1b7c79226159c82aae6d4b910cde02bc746e7737b564fb14e1bcd51df40b16a0ba278524adc0db14a55cff7259db05c78e6e1417d8389d7

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1Pj:b7o/2n1TCraU6GD1a4Xt9G

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks