Overview

overview

10

Static

static

10

2024-03-07...er.exe

windows7-x64

9

2024-03-07...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-07_c42dc203a7ca0b8806c7287b73c29862_cryptolocker

  • Size

    72KB

  • Sample

    240307-e8vfbsfd31

  • MD5

    c42dc203a7ca0b8806c7287b73c29862

  • SHA1

    87271e7d1ce4bf64b030717c280493c5c4093546

  • SHA256

    067b580a8f48c8cf3acad5b8bd0fb5dca358958119de45e7e8bc80617c725660

  • SHA512

    de181873e024109b682293603a67cade15b8582230063800762b08c0ac5d7a7a344a81e46aafd9e066b0c03e1a3846b4978cbe43100537ce4927eb41aedd918b

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs6:X6a+SOtEvwDpjBZYvQd25

Score
10/10

Malware Config

Targets

    • Target

      2024-03-07_c42dc203a7ca0b8806c7287b73c29862_cryptolocker

    • Size

      72KB

    • MD5

      c42dc203a7ca0b8806c7287b73c29862

    • SHA1

      87271e7d1ce4bf64b030717c280493c5c4093546

    • SHA256

      067b580a8f48c8cf3acad5b8bd0fb5dca358958119de45e7e8bc80617c725660

    • SHA512

      de181873e024109b682293603a67cade15b8582230063800762b08c0ac5d7a7a344a81e46aafd9e066b0c03e1a3846b4978cbe43100537ce4927eb41aedd918b

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs6:X6a+SOtEvwDpjBZYvQd25

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks