Overview

overview

10

Static

static

10

2024-03-10...er.exe

windows7-x64

9

2024-03-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-10_dfe2f8a8857feee9152eaccf68c8776a_cryptolocker

  • Size

    386KB

  • Sample

    240310-ypwntsbc8x

  • MD5

    dfe2f8a8857feee9152eaccf68c8776a

  • SHA1

    4d41187b0b94451058acc10c14faf0b5c29db1c4

  • SHA256

    4828703513c5c741ebee3c838339ddec3df36ab8e46529221c6cae79b6eda616

  • SHA512

    45ebc9ef5144bac6142a2ba8426cfa29ff9b1c7fb959e3f6130d9602cc69b1126f4c002508e5d421f4f15c7bab32cbc89f899f80f082391e75606366a143471c

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_dfe2f8a8857feee9152eaccf68c8776a_cryptolocker

    • Size

      386KB

    • MD5

      dfe2f8a8857feee9152eaccf68c8776a

    • SHA1

      4d41187b0b94451058acc10c14faf0b5c29db1c4

    • SHA256

      4828703513c5c741ebee3c838339ddec3df36ab8e46529221c6cae79b6eda616

    • SHA512

      45ebc9ef5144bac6142a2ba8426cfa29ff9b1c7fb959e3f6130d9602cc69b1126f4c002508e5d421f4f15c7bab32cbc89f899f80f082391e75606366a143471c

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks