Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_8402ad53fc8b10586c699361210f76f7_cryptolocker

  • Size

    85KB

  • Sample

    240308-eaf52sfd9s

  • MD5

    8402ad53fc8b10586c699361210f76f7

  • SHA1

    f13da83650be786bb1ddc5c097996c165b249eb2

  • SHA256

    8c8dc9e1f7fb407b64b05001d5eff7da961aa435a433215279ba3f119e70f763

  • SHA512

    3564b89347de770daaef72adb4c9f978e594b47ff307583d3c7546fbea0a1c2d55e9802711a529f98650138deecd84c2279bcab57487b9f060c915add08c266a

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSL8qe:V6a+pOtEvwDpjvpN

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_8402ad53fc8b10586c699361210f76f7_cryptolocker

    • Size

      85KB

    • MD5

      8402ad53fc8b10586c699361210f76f7

    • SHA1

      f13da83650be786bb1ddc5c097996c165b249eb2

    • SHA256

      8c8dc9e1f7fb407b64b05001d5eff7da961aa435a433215279ba3f119e70f763

    • SHA512

      3564b89347de770daaef72adb4c9f978e594b47ff307583d3c7546fbea0a1c2d55e9802711a529f98650138deecd84c2279bcab57487b9f060c915add08c266a

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSL8qe:V6a+pOtEvwDpjvpN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks