Overview

overview

10

Static

static

10

2024-03-09...er.exe

windows7-x64

9

2024-03-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-09_5c3a5f262e6caef7bf31237896e7c911_cryptolocker

  • Size

    128KB

  • Sample

    240309-d4y3aadb21

  • MD5

    5c3a5f262e6caef7bf31237896e7c911

  • SHA1

    6ce5bb87807113178a7ae0858227d1c7e7b6a0db

  • SHA256

    fa99f1e0f697f3320a1d19ff4b0980a356ce1e668a1f8d5bd6b5c0b183caf9a8

  • SHA512

    5739f15c964ef288706f848b35b2da306064f71f3aaed19c27a24c78b6c944277ad96d08ba7431bba8ba6b1035a4d7d055a6e505d0730f1656497b22fa2da8fa

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1eI:V6a+pOtEvwDpjtz+

Score
10/10

Malware Config

Targets

    • Target

      2024-03-09_5c3a5f262e6caef7bf31237896e7c911_cryptolocker

    • Size

      128KB

    • MD5

      5c3a5f262e6caef7bf31237896e7c911

    • SHA1

      6ce5bb87807113178a7ae0858227d1c7e7b6a0db

    • SHA256

      fa99f1e0f697f3320a1d19ff4b0980a356ce1e668a1f8d5bd6b5c0b183caf9a8

    • SHA512

      5739f15c964ef288706f848b35b2da306064f71f3aaed19c27a24c78b6c944277ad96d08ba7431bba8ba6b1035a4d7d055a6e505d0730f1656497b22fa2da8fa

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1eI:V6a+pOtEvwDpjtz+

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks