Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_c5e65e3b0af6a0dc412f01f4dccd6a37_cryptolocker

  • Size

    386KB

  • Sample

    240305-3q6bwach2s

  • MD5

    c5e65e3b0af6a0dc412f01f4dccd6a37

  • SHA1

    214ad7413f5e0128e8ea004d2f8e96e57aaf20be

  • SHA256

    29b24c4166c28736812411f972d4c1698cd1215ceba04bc7fd72b3babb154e66

  • SHA512

    dda84b6a147e4b042c393523ecb92eb26e77538a814565502cbec8f3f33e47be03bc12755914c625e96271480e9599019b5f5cd8282dcfa03048e88fd30f3467

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXb:nnOflT/ZFIjBz3xjTxynGUOUhXb

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_c5e65e3b0af6a0dc412f01f4dccd6a37_cryptolocker

    • Size

      386KB

    • MD5

      c5e65e3b0af6a0dc412f01f4dccd6a37

    • SHA1

      214ad7413f5e0128e8ea004d2f8e96e57aaf20be

    • SHA256

      29b24c4166c28736812411f972d4c1698cd1215ceba04bc7fd72b3babb154e66

    • SHA512

      dda84b6a147e4b042c393523ecb92eb26e77538a814565502cbec8f3f33e47be03bc12755914c625e96271480e9599019b5f5cd8282dcfa03048e88fd30f3467

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXb:nnOflT/ZFIjBz3xjTxynGUOUhXb

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks