Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_20def27ba4598b45dd1f900179fa9741_cryptolocker

  • Size

    70KB

  • Sample

    240312-e8vq4agf2w

  • MD5

    20def27ba4598b45dd1f900179fa9741

  • SHA1

    74860a35a4036862aafcfa8c71f28d78c74eee59

  • SHA256

    ca733edd08fb48f0d3a489f4fc3f8be58e60887185a9efce22d85ce0619ee18e

  • SHA512

    575e623aed84f1f32699ade86e8a26a0b5c557669a7794ff03ce9404775fa8f88a4effcd6731155c502b01b9eee35f3de69ba6a3c26a8c9e9c303550be571841

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOk:DW60sllyWOtEvwDpjwF85L

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_20def27ba4598b45dd1f900179fa9741_cryptolocker

    • Size

      70KB

    • MD5

      20def27ba4598b45dd1f900179fa9741

    • SHA1

      74860a35a4036862aafcfa8c71f28d78c74eee59

    • SHA256

      ca733edd08fb48f0d3a489f4fc3f8be58e60887185a9efce22d85ce0619ee18e

    • SHA512

      575e623aed84f1f32699ade86e8a26a0b5c557669a7794ff03ce9404775fa8f88a4effcd6731155c502b01b9eee35f3de69ba6a3c26a8c9e9c303550be571841

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOk:DW60sllyWOtEvwDpjwF85L

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks