Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_e9f71009417300b5622c02f0db302e07_cryptolocker

  • Size

    60KB

  • Sample

    240305-3vb9lada2y

  • MD5

    e9f71009417300b5622c02f0db302e07

  • SHA1

    7dcc30407b1f03fd92c5309e9b332121dbba7c14

  • SHA256

    e6011efb3f799e794565bacd77a660a232f8d3f0585944e111c56ae32f7d13b7

  • SHA512

    5be9e95c4d2c2b1ba2da519324e1c2c5ca15e6059433828ae218e43af03381749dbc43c0cd13a67aeececfa0eb9b835e364fa321f5526ea527ebeb200353389d

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMX:TCjsIOtEvwDpj5HE/OUHnSMw

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_e9f71009417300b5622c02f0db302e07_cryptolocker

    • Size

      60KB

    • MD5

      e9f71009417300b5622c02f0db302e07

    • SHA1

      7dcc30407b1f03fd92c5309e9b332121dbba7c14

    • SHA256

      e6011efb3f799e794565bacd77a660a232f8d3f0585944e111c56ae32f7d13b7

    • SHA512

      5be9e95c4d2c2b1ba2da519324e1c2c5ca15e6059433828ae218e43af03381749dbc43c0cd13a67aeececfa0eb9b835e364fa321f5526ea527ebeb200353389d

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMX:TCjsIOtEvwDpj5HE/OUHnSMw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks