Overview

overview

10

Static

static

10

2024-03-11...er.exe

windows7-x64

9

2024-03-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-11_5081a9a24b2c70774f5f37413e2a4cf8_cryptolocker

  • Size

    42KB

  • Sample

    240311-bvg2asgg57

  • MD5

    5081a9a24b2c70774f5f37413e2a4cf8

  • SHA1

    398e08998e58269118f18afc3b03a46c66782499

  • SHA256

    bdf347797184a9fb6d464cd5febfdb1881ade33c5fcd19de4fe8874cbf2f2f06

  • SHA512

    420982372d8adacb4967bb2946507d152ecb137dece5d351ab9a4c2dbb554c306506ce6184cc28d3790c1bbac8f2ec7ed392b3c651e16853e70186320744f64d

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyW:btB9g/WItCSsAGjX7e9N0hunrknld

Score
10/10

Malware Config

Targets

    • Target

      2024-03-11_5081a9a24b2c70774f5f37413e2a4cf8_cryptolocker

    • Size

      42KB

    • MD5

      5081a9a24b2c70774f5f37413e2a4cf8

    • SHA1

      398e08998e58269118f18afc3b03a46c66782499

    • SHA256

      bdf347797184a9fb6d464cd5febfdb1881ade33c5fcd19de4fe8874cbf2f2f06

    • SHA512

      420982372d8adacb4967bb2946507d152ecb137dece5d351ab9a4c2dbb554c306506ce6184cc28d3790c1bbac8f2ec7ed392b3c651e16853e70186320744f64d

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyW:btB9g/WItCSsAGjX7e9N0hunrknld

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks