Overview

overview

10

Static

static

10

2024-02-29...er.exe

windows7-x64

9

2024-02-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-29_ebf0b2550febb6b79cf2036c3b14581c_cryptolocker

  • Size

    77KB

  • Sample

    240229-eh62facg61

  • MD5

    ebf0b2550febb6b79cf2036c3b14581c

  • SHA1

    643cdab4187c145e38635c8a628e8428c9f8ef18

  • SHA256

    74929909e74596863bf5beff160850eb077a1612e3c9c25a37230eb40ab77ada

  • SHA512

    07b0612182900fa54b520815785aa2212ebbe4697125fd73f09afebf250fcb96ae693d6d6c17b9c2e1e40a4503521bd6778383f7ada083c0109ed35d17f74c76

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTeL5c1:ZVxkGOtEvwDpjcaxS

Score
10/10

Malware Config

Targets

    • Target

      2024-02-29_ebf0b2550febb6b79cf2036c3b14581c_cryptolocker

    • Size

      77KB

    • MD5

      ebf0b2550febb6b79cf2036c3b14581c

    • SHA1

      643cdab4187c145e38635c8a628e8428c9f8ef18

    • SHA256

      74929909e74596863bf5beff160850eb077a1612e3c9c25a37230eb40ab77ada

    • SHA512

      07b0612182900fa54b520815785aa2212ebbe4697125fd73f09afebf250fcb96ae693d6d6c17b9c2e1e40a4503521bd6778383f7ada083c0109ed35d17f74c76

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTeL5c1:ZVxkGOtEvwDpjcaxS

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks