Overview

overview

10

Static

static

10

2024-03-10...er.exe

windows7-x64

9

2024-03-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-10_16812ced572714f1333863271d813dd6_cryptolocker

  • Size

    129KB

  • Sample

    240310-c7fjnsac95

  • MD5

    16812ced572714f1333863271d813dd6

  • SHA1

    5f2c5f59a6e9a2ad1c354884fb38ade0a118f8fb

  • SHA256

    b875cfe2211fb4c6084452bda4ca300fd80f126c9aa12806452e041264d86267

  • SHA512

    a368b4762b1c54f22b55a26c1d24b4a1d98bcc7725217c3f0402880f4133defa6aa16fb450eb0882aa7f95adb4bc8b0c52b716c74a22a62280985392f4cff3fb

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1er:V6a+pOtEvwDpjtzR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_16812ced572714f1333863271d813dd6_cryptolocker

    • Size

      129KB

    • MD5

      16812ced572714f1333863271d813dd6

    • SHA1

      5f2c5f59a6e9a2ad1c354884fb38ade0a118f8fb

    • SHA256

      b875cfe2211fb4c6084452bda4ca300fd80f126c9aa12806452e041264d86267

    • SHA512

      a368b4762b1c54f22b55a26c1d24b4a1d98bcc7725217c3f0402880f4133defa6aa16fb450eb0882aa7f95adb4bc8b0c52b716c74a22a62280985392f4cff3fb

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1er:V6a+pOtEvwDpjtzR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks