Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_2b3159ea146ce680abc8bcb42739e9c0_cryptolocker

  • Size

    104KB

  • Sample

    240306-tw22zadc4z

  • MD5

    2b3159ea146ce680abc8bcb42739e9c0

  • SHA1

    87ee21b396ea17eea8d19ebbf2d489e2708e952f

  • SHA256

    cf68828eac36ee3a73e3eb9cef266c6f8283966767211208c690f5266a419063

  • SHA512

    771198136a4d2fbaf46939d6603e3dc5c56c8e02aca26b592cc4aca7b44330639dda850a65de66447a04cfac140a07fdef306229d0617023cc5b4c1972edd4b9

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp69sP:V6a+pOtEvwDpjtzw

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_2b3159ea146ce680abc8bcb42739e9c0_cryptolocker

    • Size

      104KB

    • MD5

      2b3159ea146ce680abc8bcb42739e9c0

    • SHA1

      87ee21b396ea17eea8d19ebbf2d489e2708e952f

    • SHA256

      cf68828eac36ee3a73e3eb9cef266c6f8283966767211208c690f5266a419063

    • SHA512

      771198136a4d2fbaf46939d6603e3dc5c56c8e02aca26b592cc4aca7b44330639dda850a65de66447a04cfac140a07fdef306229d0617023cc5b4c1972edd4b9

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp69sP:V6a+pOtEvwDpjtzw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks