Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-06_799f10ca3eeaf3592efccf70a1b7ce7a_cryptolocker

  • Size

    33KB

  • Sample

    240306-1lebgsbb71

  • MD5

    799f10ca3eeaf3592efccf70a1b7ce7a

  • SHA1

    14f23387f0cc577361e46c2a5bb412c5552c821c

  • SHA256

    082ce69421b32fcbffc5b3b35c2c4c8013855542c774952d2d061ddb5b8d33e3

  • SHA512

    487f50df80b845b6212adee91b58fbe92fdd9889776fdf2ff60cf9178737614290b494a7a1a194204d107579263caba9ab720cf1b2a3b0655ed1bb9c7ea5b098

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1PR:b7o/2n1TCraU6GD1a4Xt9I

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_799f10ca3eeaf3592efccf70a1b7ce7a_cryptolocker

    • Size

      33KB

    • MD5

      799f10ca3eeaf3592efccf70a1b7ce7a

    • SHA1

      14f23387f0cc577361e46c2a5bb412c5552c821c

    • SHA256

      082ce69421b32fcbffc5b3b35c2c4c8013855542c774952d2d061ddb5b8d33e3

    • SHA512

      487f50df80b845b6212adee91b58fbe92fdd9889776fdf2ff60cf9178737614290b494a7a1a194204d107579263caba9ab720cf1b2a3b0655ed1bb9c7ea5b098

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+1PR:b7o/2n1TCraU6GD1a4Xt9I

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks