Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_2651ec824e37a235d85d700d0aaec66f_cryptolocker

  • Size

    32KB

  • Sample

    240305-svrn6sba34

  • MD5

    2651ec824e37a235d85d700d0aaec66f

  • SHA1

    4e1470df18f076a3d0cd31a7d1d168ab76907332

  • SHA256

    176ef3a6da3645c11d5d596f5c8778fa3c0526f0a6396dee76520215546c20f6

  • SHA512

    686c49b6b800ba607486e44b0a870a6c011e5b022c58fa3c0269a1164f581b8e304220fafd9df475827ed1e5fcf85d3ea4e8905aa7e6b33e8f175ec234bb3444

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtq:b7o/2n1TCraU6GD1a4Xt9R0aOk

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_2651ec824e37a235d85d700d0aaec66f_cryptolocker

    • Size

      32KB

    • MD5

      2651ec824e37a235d85d700d0aaec66f

    • SHA1

      4e1470df18f076a3d0cd31a7d1d168ab76907332

    • SHA256

      176ef3a6da3645c11d5d596f5c8778fa3c0526f0a6396dee76520215546c20f6

    • SHA512

      686c49b6b800ba607486e44b0a870a6c011e5b022c58fa3c0269a1164f581b8e304220fafd9df475827ed1e5fcf85d3ea4e8905aa7e6b33e8f175ec234bb3444

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtq:b7o/2n1TCraU6GD1a4Xt9R0aOk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks