Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-28_b29e6aac77682741d5cad2c33451a969_cryptolocker

  • Size

    386KB

  • Sample

    240228-ymeyascd3s

  • MD5

    b29e6aac77682741d5cad2c33451a969

  • SHA1

    1bd588162ff15ca1c15ec42f31b72ab4d560fb68

  • SHA256

    a686f7a908003b26776e00daf4c3f676988b77af6604421ddba8bb5383ed588e

  • SHA512

    a7a44400135471af3a8ba00248b60f6b1f1ab5fe738381de34de13ce6a6d257abd62d689f2246c48f0220e2bc73203a61ff9ed643c74e1985c93a0c1dc6c9162

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX7:nnOflT/ZFIjBz3xjTxynGUOUhX7

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_b29e6aac77682741d5cad2c33451a969_cryptolocker

    • Size

      386KB

    • MD5

      b29e6aac77682741d5cad2c33451a969

    • SHA1

      1bd588162ff15ca1c15ec42f31b72ab4d560fb68

    • SHA256

      a686f7a908003b26776e00daf4c3f676988b77af6604421ddba8bb5383ed588e

    • SHA512

      a7a44400135471af3a8ba00248b60f6b1f1ab5fe738381de34de13ce6a6d257abd62d689f2246c48f0220e2bc73203a61ff9ed643c74e1985c93a0c1dc6c9162

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX7:nnOflT/ZFIjBz3xjTxynGUOUhX7

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks