Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_42258c1540431d9364370ab3ebec6ac2_cryptolocker

  • Size

    40KB

  • Sample

    240305-gh8alsfh3t

  • MD5

    42258c1540431d9364370ab3ebec6ac2

  • SHA1

    cb6db71b19a93e99b80f5b91f6f13ae3f5304a6d

  • SHA256

    fb3fa5b850ef42733cee0ef7a28737626906031e475b1cde913eeabf4e01fb33

  • SHA512

    a794e5d22d90e35cff5039b57536c5dfc942b3d121a1ba17f5f5cc088572b93d9869f116edc82ddc31f1b333d6ad38c4a19a51eee554ecfbc18ee7588872e33c

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFoC:bxNrC7kYo1Fxf3s05rwxbFJ

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_42258c1540431d9364370ab3ebec6ac2_cryptolocker

    • Size

      40KB

    • MD5

      42258c1540431d9364370ab3ebec6ac2

    • SHA1

      cb6db71b19a93e99b80f5b91f6f13ae3f5304a6d

    • SHA256

      fb3fa5b850ef42733cee0ef7a28737626906031e475b1cde913eeabf4e01fb33

    • SHA512

      a794e5d22d90e35cff5039b57536c5dfc942b3d121a1ba17f5f5cc088572b93d9869f116edc82ddc31f1b333d6ad38c4a19a51eee554ecfbc18ee7588872e33c

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFoC:bxNrC7kYo1Fxf3s05rwxbFJ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks