Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-28_fb1439dcc749a2a9c887bb29c2caed56_cryptolocker

  • Size

    69KB

  • Sample

    240228-tnzxmsfh59

  • MD5

    fb1439dcc749a2a9c887bb29c2caed56

  • SHA1

    b71169311aa53f37781a79a7ec49b63e4e49c267

  • SHA256

    7ea02f3ed324d180c1f50bf5d0e65805b6f7d7b1d086ab1476c00caf4e24bf68

  • SHA512

    d15d5684b6afdb563da584ef81a2fe24bd64f3302e81561c96804e4018e680a2569a40183485c9f788ed402e16f845822858dc53985807505b8d2a4f01eaec34

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUsn:DW60sllyWOtEvwDpjwF85W

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_fb1439dcc749a2a9c887bb29c2caed56_cryptolocker

    • Size

      69KB

    • MD5

      fb1439dcc749a2a9c887bb29c2caed56

    • SHA1

      b71169311aa53f37781a79a7ec49b63e4e49c267

    • SHA256

      7ea02f3ed324d180c1f50bf5d0e65805b6f7d7b1d086ab1476c00caf4e24bf68

    • SHA512

      d15d5684b6afdb563da584ef81a2fe24bd64f3302e81561c96804e4018e680a2569a40183485c9f788ed402e16f845822858dc53985807505b8d2a4f01eaec34

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUsn:DW60sllyWOtEvwDpjwF85W

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks