Overview

overview

10

Static

static

10

2024-03-07...er.exe

windows7-x64

9

2024-03-07...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-07_6b93879f8de72bf604149347e2d39f40_cryptolocker

  • Size

    49KB

  • Sample

    240307-xhrkvsba69

  • MD5

    6b93879f8de72bf604149347e2d39f40

  • SHA1

    2228d82d7952418019f47a9a1c19293c116ba6d5

  • SHA256

    5148116f74cc9917aee3f50a6e44499c523521ebb59527372e6662f047155ce2

  • SHA512

    9f1c854fee00d35d01761064b38a36917492e4b156ec4f741a865e5f80f3dedb85153f7baf9c2fdae24dd6657e6af32715ef2ff38c0c189a17ccd43a68c51e3b

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSic:bgGYcA/53GAA6y37Q6dI+d5V

Score
10/10

Malware Config

Targets

    • Target

      2024-03-07_6b93879f8de72bf604149347e2d39f40_cryptolocker

    • Size

      49KB

    • MD5

      6b93879f8de72bf604149347e2d39f40

    • SHA1

      2228d82d7952418019f47a9a1c19293c116ba6d5

    • SHA256

      5148116f74cc9917aee3f50a6e44499c523521ebb59527372e6662f047155ce2

    • SHA512

      9f1c854fee00d35d01761064b38a36917492e4b156ec4f741a865e5f80f3dedb85153f7baf9c2fdae24dd6657e6af32715ef2ff38c0c189a17ccd43a68c51e3b

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSic:bgGYcA/53GAA6y37Q6dI+d5V

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks