Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_ddfff4d000a0596b84f0b1640d3671bf_cryptolocker

  • Size

    34KB

  • Sample

    240308-ej3qeaff91

  • MD5

    ddfff4d000a0596b84f0b1640d3671bf

  • SHA1

    a6f3d9a661ad910c9478b2e8b93ac3867ce3302a

  • SHA256

    66cd994ceb70eaaad58118fd7d93eefe4cea95333a1ffd09b1eed17558055f2e

  • SHA512

    e97d09743fb6e9580558a491bf98f09fc2bbbcf9a70344c72865e1fc40f6032098bd88d62f7affddd405281ba4ecc42426becef0982695681f6f4ac828b33811

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0q64:btB9g/WItCSsAGjX7r3BTf

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_ddfff4d000a0596b84f0b1640d3671bf_cryptolocker

    • Size

      34KB

    • MD5

      ddfff4d000a0596b84f0b1640d3671bf

    • SHA1

      a6f3d9a661ad910c9478b2e8b93ac3867ce3302a

    • SHA256

      66cd994ceb70eaaad58118fd7d93eefe4cea95333a1ffd09b1eed17558055f2e

    • SHA512

      e97d09743fb6e9580558a491bf98f09fc2bbbcf9a70344c72865e1fc40f6032098bd88d62f7affddd405281ba4ecc42426becef0982695681f6f4ac828b33811

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0q64:btB9g/WItCSsAGjX7r3BTf

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks