Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_8d9d8879bde0bdc120ca41068d6e3810_cryptolocker

  • Size

    387KB

  • Sample

    240312-2h5vpscf7x

  • MD5

    8d9d8879bde0bdc120ca41068d6e3810

  • SHA1

    4ab4847ec4638ba421bc67f0519ff2d4c4e23002

  • SHA256

    b0f928915ea7fdac1dcd4868544644eb5628565c7715716b1c1be4f9c52bffcf

  • SHA512

    7ef1e8c9f4715c4126b24d9fe6b178d39c3004293a677fc8caa51611db142350f4dddc64b3d6bd9ca21a511524f34dbc378c42da60cea80fcef729f3c4a5cbbc

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXA:nnOflT/ZFIjBz3xjTxynGUOUhXA

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_8d9d8879bde0bdc120ca41068d6e3810_cryptolocker

    • Size

      387KB

    • MD5

      8d9d8879bde0bdc120ca41068d6e3810

    • SHA1

      4ab4847ec4638ba421bc67f0519ff2d4c4e23002

    • SHA256

      b0f928915ea7fdac1dcd4868544644eb5628565c7715716b1c1be4f9c52bffcf

    • SHA512

      7ef1e8c9f4715c4126b24d9fe6b178d39c3004293a677fc8caa51611db142350f4dddc64b3d6bd9ca21a511524f34dbc378c42da60cea80fcef729f3c4a5cbbc

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXA:nnOflT/ZFIjBz3xjTxynGUOUhXA

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks