Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_2f6a8218bc8c59e4be5ade30e613acab_cryptolocker

  • Size

    29KB

  • Sample

    240308-c1wmbaeb4y

  • MD5

    2f6a8218bc8c59e4be5ade30e613acab

  • SHA1

    60747c69d07e090cac7798afaf6452744348bd07

  • SHA256

    f1def9ff3d361e8622416f39b20f792ead87790b9a96106f881250315baf6746

  • SHA512

    5d3fd584fa2689da777a4d53feeef43d84a8ff58b6669cbbe4faead5f3e5a995bfe914469414753424f50bf8de7a3f6f18a83aed1ceaa2832102228e66daf578

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/2B:bA74zYcgT/Ekd0ryfjQRSBU

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_2f6a8218bc8c59e4be5ade30e613acab_cryptolocker

    • Size

      29KB

    • MD5

      2f6a8218bc8c59e4be5ade30e613acab

    • SHA1

      60747c69d07e090cac7798afaf6452744348bd07

    • SHA256

      f1def9ff3d361e8622416f39b20f792ead87790b9a96106f881250315baf6746

    • SHA512

      5d3fd584fa2689da777a4d53feeef43d84a8ff58b6669cbbe4faead5f3e5a995bfe914469414753424f50bf8de7a3f6f18a83aed1ceaa2832102228e66daf578

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/2B:bA74zYcgT/Ekd0ryfjQRSBU

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks