Overview

overview

10

Static

static

10

2024-02-29...er.exe

windows7-x64

9

2024-02-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-29_4a9431981021323dd556357b75483513_cryptolocker

  • Size

    58KB

  • Sample

    240229-ger48agb3t

  • MD5

    4a9431981021323dd556357b75483513

  • SHA1

    983b102d7fa08854267108972130e2a274893a07

  • SHA256

    89ad13b4d7db8254c73a37ffda5fc7caa8a83cceda7aa0ccb073536c738bc3d0

  • SHA512

    e7aa390478c22c13c2517aaaf3964f7641a72351f942e95a4cdd0c573ddb91f7958fc4eb59aece0a1de8b9a050ffa97cdc96534ae9f76614b8a16cddb7a17d11

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYPO+lxUah:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lZ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-29_4a9431981021323dd556357b75483513_cryptolocker

    • Size

      58KB

    • MD5

      4a9431981021323dd556357b75483513

    • SHA1

      983b102d7fa08854267108972130e2a274893a07

    • SHA256

      89ad13b4d7db8254c73a37ffda5fc7caa8a83cceda7aa0ccb073536c738bc3d0

    • SHA512

      e7aa390478c22c13c2517aaaf3964f7641a72351f942e95a4cdd0c573ddb91f7958fc4eb59aece0a1de8b9a050ffa97cdc96534ae9f76614b8a16cddb7a17d11

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYPO+lxUah:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lZ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks