Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-08_d868ea21ae741a680ae212d7cd86d945_cryptolocker

  • Size

    131KB

  • Sample

    240308-lws53ada5z

  • MD5

    d868ea21ae741a680ae212d7cd86d945

  • SHA1

    5193b5c07065cd0e554d48754e8f3dc2941b6d45

  • SHA256

    5032521b26ab4ccfba4aa5e4a00a8b6babc53a7da9e918354537a54739173bee

  • SHA512

    b1a09246aea09043db2e251120fea1bcc071b9105b0116f4a025bee65bf69b558d4696bf80725bd9ecaa22b622dcd8a7a5dc53524f2284c6766807365b7ad9bb

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1et:V6a+pOtEvwDpjtz3

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_d868ea21ae741a680ae212d7cd86d945_cryptolocker

    • Size

      131KB

    • MD5

      d868ea21ae741a680ae212d7cd86d945

    • SHA1

      5193b5c07065cd0e554d48754e8f3dc2941b6d45

    • SHA256

      5032521b26ab4ccfba4aa5e4a00a8b6babc53a7da9e918354537a54739173bee

    • SHA512

      b1a09246aea09043db2e251120fea1bcc071b9105b0116f4a025bee65bf69b558d4696bf80725bd9ecaa22b622dcd8a7a5dc53524f2284c6766807365b7ad9bb

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1et:V6a+pOtEvwDpjtz3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks