Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-28_711dc559b5863151331d55ee225cb0c3_cryptolocker

  • Size

    103KB

  • Sample

    240228-fpmrtabh53

  • MD5

    711dc559b5863151331d55ee225cb0c3

  • SHA1

    9a6d61b6ff5aac37b4ad5263371e5afeab57a463

  • SHA256

    c54d604cea86cceb6c087a5112a4c14909e9c298507f23674773d4405602e8e1

  • SHA512

    5a359e5d9d0e6850a1df867620ad11f5c5db5e443c41a46c241f8e0a0184b9ccfc29ad92e5b3df8530a15030701f7e482e7163defcd56d75a50830f90899de7e

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPn:V6a+pOtEvwDpjtzF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_711dc559b5863151331d55ee225cb0c3_cryptolocker

    • Size

      103KB

    • MD5

      711dc559b5863151331d55ee225cb0c3

    • SHA1

      9a6d61b6ff5aac37b4ad5263371e5afeab57a463

    • SHA256

      c54d604cea86cceb6c087a5112a4c14909e9c298507f23674773d4405602e8e1

    • SHA512

      5a359e5d9d0e6850a1df867620ad11f5c5db5e443c41a46c241f8e0a0184b9ccfc29ad92e5b3df8530a15030701f7e482e7163defcd56d75a50830f90899de7e

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPn:V6a+pOtEvwDpjtzF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks