Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_2dcd3ea6c4e00777181b7824e09d6a59_cryptolocker

  • Size

    61KB

  • Sample

    240306-byyhfsfb81

  • MD5

    2dcd3ea6c4e00777181b7824e09d6a59

  • SHA1

    37306abcab5540fc37f68af6db1a6b429cdb1e79

  • SHA256

    fe8d62008ecbdcf55a19ea2c83d266090bec39f460a8ab6b876e0da133a87796

  • SHA512

    7f8ba5b3f8f2d91f8c7601f14ae6c85d751f0a69324b07b635514b03902a23b7c16ac023dbb148aa8cf312af3ed57c74bda7137a8063afa4a3a3e4a00c190cb9

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsxa:BbdDmjr+OtEvwDpjM8A

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_2dcd3ea6c4e00777181b7824e09d6a59_cryptolocker

    • Size

      61KB

    • MD5

      2dcd3ea6c4e00777181b7824e09d6a59

    • SHA1

      37306abcab5540fc37f68af6db1a6b429cdb1e79

    • SHA256

      fe8d62008ecbdcf55a19ea2c83d266090bec39f460a8ab6b876e0da133a87796

    • SHA512

      7f8ba5b3f8f2d91f8c7601f14ae6c85d751f0a69324b07b635514b03902a23b7c16ac023dbb148aa8cf312af3ed57c74bda7137a8063afa4a3a3e4a00c190cb9

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsxa:BbdDmjr+OtEvwDpjM8A

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks