Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_338e9a522c9fff9ba2f4accbb0a9d6bd_cryptolocker

  • Size

    68KB

  • Sample

    240306-cvvstshh25

  • MD5

    338e9a522c9fff9ba2f4accbb0a9d6bd

  • SHA1

    b5a631c0b1bda54ef7530ea552b5afa021a3ce0b

  • SHA256

    4c9852bfa07008a544a8ae89cb58f4d92dd4a09d77efcc0f0fe4445053aa6c2f

  • SHA512

    fab799ad8f9fd95a2aba02fc144b8ea938b73355e0ea3b9e780612ab7a9e50ec2180b3daa95d701f05940e227f7d87e1466e30812527b92929a94764751e48f4

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rn:vj+jsMQMOtEvwDpj5HZYTjipvF24f

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_338e9a522c9fff9ba2f4accbb0a9d6bd_cryptolocker

    • Size

      68KB

    • MD5

      338e9a522c9fff9ba2f4accbb0a9d6bd

    • SHA1

      b5a631c0b1bda54ef7530ea552b5afa021a3ce0b

    • SHA256

      4c9852bfa07008a544a8ae89cb58f4d92dd4a09d77efcc0f0fe4445053aa6c2f

    • SHA512

      fab799ad8f9fd95a2aba02fc144b8ea938b73355e0ea3b9e780612ab7a9e50ec2180b3daa95d701f05940e227f7d87e1466e30812527b92929a94764751e48f4

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rn:vj+jsMQMOtEvwDpj5HZYTjipvF24f

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks