Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_d0384da9a20ca9fbf103107fcdd5bd9e_cryptolocker

  • Size

    52KB

  • Sample

    240308-w4gr4sdg48

  • MD5

    d0384da9a20ca9fbf103107fcdd5bd9e

  • SHA1

    f1b1106293d0b1d1cb26c3e3e3191e68d2eb869c

  • SHA256

    6117d8d7fa10e252db2471b2370a553cabc2485a006efc534a091c2d3144caf7

  • SHA512

    183e6869928d70b3cd4c84e7bf6187b94a08b2e341e2117ef24331572718c5fb7cea27e24b9df7672d46f68b3e61e6eda9d5304cffcfb7513387c17d8c056a98

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv0itg:vj+jsMQMOtEvwDpj5HH1nw73KOFsiu

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_d0384da9a20ca9fbf103107fcdd5bd9e_cryptolocker

    • Size

      52KB

    • MD5

      d0384da9a20ca9fbf103107fcdd5bd9e

    • SHA1

      f1b1106293d0b1d1cb26c3e3e3191e68d2eb869c

    • SHA256

      6117d8d7fa10e252db2471b2370a553cabc2485a006efc534a091c2d3144caf7

    • SHA512

      183e6869928d70b3cd4c84e7bf6187b94a08b2e341e2117ef24331572718c5fb7cea27e24b9df7672d46f68b3e61e6eda9d5304cffcfb7513387c17d8c056a98

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv0itg:vj+jsMQMOtEvwDpj5HH1nw73KOFsiu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks