Overview

overview

10

Static

static

10

2024-03-10...er.exe

windows7-x64

9

2024-03-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-10_9fcd5498c6e548e0ea5ea514d45fe972_cryptolocker

  • Size

    386KB

  • Sample

    240310-ylzajsbb9y

  • MD5

    9fcd5498c6e548e0ea5ea514d45fe972

  • SHA1

    9ae78f5386a1553395639bbda42c2d73e64e85f5

  • SHA256

    1024d349ecbedd52890fb7512e3a868137557d901be47038d1d6f4d5539025d0

  • SHA512

    1a35a1c9802ea7fa00d3ecb90fe109c9eef34c2d18496293f8e9024f5b7e8ba65eb52903820276876be816d4c5e01730794dd2a6c4373d9a4527bd51f2f9ec4f

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXX:nnOflT/ZFIjBz3xjTxynGUOUhXX

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_9fcd5498c6e548e0ea5ea514d45fe972_cryptolocker

    • Size

      386KB

    • MD5

      9fcd5498c6e548e0ea5ea514d45fe972

    • SHA1

      9ae78f5386a1553395639bbda42c2d73e64e85f5

    • SHA256

      1024d349ecbedd52890fb7512e3a868137557d901be47038d1d6f4d5539025d0

    • SHA512

      1a35a1c9802ea7fa00d3ecb90fe109c9eef34c2d18496293f8e9024f5b7e8ba65eb52903820276876be816d4c5e01730794dd2a6c4373d9a4527bd51f2f9ec4f

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXX:nnOflT/ZFIjBz3xjTxynGUOUhXX

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks