Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_b18d6ad1a19b680baa931a1fe50741c5_cryptolocker

  • Size

    95KB

  • Sample

    240308-yf1lesef63

  • MD5

    b18d6ad1a19b680baa931a1fe50741c5

  • SHA1

    f9a962e1e65ff178477f178d3165595dfb4bf1ef

  • SHA256

    107e38905e41e96b89128884553864fc598046b1c1d7b13da125515c5db47ce0

  • SHA512

    3f41665a70c986b9f409ccc8b0f9bfc99a4ec7a334775aa910131a022ad7cfe4400f6581f0a66ab3db5a4cde3e4815761ebc5ed7ac6d657e7345a3383f6f7e59

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpH:V6a+pOtEvwDpjtzM

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_b18d6ad1a19b680baa931a1fe50741c5_cryptolocker

    • Size

      95KB

    • MD5

      b18d6ad1a19b680baa931a1fe50741c5

    • SHA1

      f9a962e1e65ff178477f178d3165595dfb4bf1ef

    • SHA256

      107e38905e41e96b89128884553864fc598046b1c1d7b13da125515c5db47ce0

    • SHA512

      3f41665a70c986b9f409ccc8b0f9bfc99a4ec7a334775aa910131a022ad7cfe4400f6581f0a66ab3db5a4cde3e4815761ebc5ed7ac6d657e7345a3383f6f7e59

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpH:V6a+pOtEvwDpjtzM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks