Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-06_8d6b90f69b6ee37538ce34c2f9cf35ed_cryptolocker

  • Size

    61KB

  • Sample

    240306-wec3mafa7t

  • MD5

    8d6b90f69b6ee37538ce34c2f9cf35ed

  • SHA1

    11725085fee5048173e8f10dc0bb55ad80264088

  • SHA256

    d0235c1d59830b24c58d732f6d442647b4d6bc4042815f62d6ebf3ddcdb77095

  • SHA512

    b93ae65d71667e690344129cf7d3da380448a5eb3f3e02646eace63f92a398ea0cb0b70feb4ed31b2483dde0eba8f8ff77060fe7cfcf5b97e35df60c96b426e4

  • SSDEEP

    1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHOv:btng54SMLr+/AO/kIhfoKMHdt

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_8d6b90f69b6ee37538ce34c2f9cf35ed_cryptolocker

    • Size

      61KB

    • MD5

      8d6b90f69b6ee37538ce34c2f9cf35ed

    • SHA1

      11725085fee5048173e8f10dc0bb55ad80264088

    • SHA256

      d0235c1d59830b24c58d732f6d442647b4d6bc4042815f62d6ebf3ddcdb77095

    • SHA512

      b93ae65d71667e690344129cf7d3da380448a5eb3f3e02646eace63f92a398ea0cb0b70feb4ed31b2483dde0eba8f8ff77060fe7cfcf5b97e35df60c96b426e4

    • SSDEEP

      1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHOv:btng54SMLr+/AO/kIhfoKMHdt

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks