Overview

overview

10

Static

static

10

2024-03-07...er.exe

windows7-x64

9

2024-03-07...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-07_0d50839689a1e23283d3d8e43a6e6193_cryptolocker

  • Size

    74KB

  • Sample

    240307-cwzs6sec9y

  • MD5

    0d50839689a1e23283d3d8e43a6e6193

  • SHA1

    be97c841877b5350da41ba50271eefb5ac8556c4

  • SHA256

    f3ee1c50f9e547d7a23d540458cd3163ddf9d7ecc9df3e0051634f15536269e9

  • SHA512

    14c5cf93bc6ee2f93dfd3ed41e8e255ede884a12d5723c84655c5f72c07476f8ba984dce11d7a514c2d14c846de0ae1acbdd0c7bf80ca7cdd9d8bd7e371255b2

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sX:X6a+SOtEvwDpjBZYvQd2M

Score
10/10

Malware Config

Targets

    • Target

      2024-03-07_0d50839689a1e23283d3d8e43a6e6193_cryptolocker

    • Size

      74KB

    • MD5

      0d50839689a1e23283d3d8e43a6e6193

    • SHA1

      be97c841877b5350da41ba50271eefb5ac8556c4

    • SHA256

      f3ee1c50f9e547d7a23d540458cd3163ddf9d7ecc9df3e0051634f15536269e9

    • SHA512

      14c5cf93bc6ee2f93dfd3ed41e8e255ede884a12d5723c84655c5f72c07476f8ba984dce11d7a514c2d14c846de0ae1acbdd0c7bf80ca7cdd9d8bd7e371255b2

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sX:X6a+SOtEvwDpjBZYvQd2M

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks