Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_b30991b703bcb169fa74337d4f6a9683_cryptolocker

  • Size

    105KB

  • Sample

    240312-pzq2nahb61

  • MD5

    b30991b703bcb169fa74337d4f6a9683

  • SHA1

    e1397b798f6f4a6f8238f25f63ed8d85eb5cf0c5

  • SHA256

    fd7e66ed3a7425f3b9cfeb390708b106feab5a32e9a7ecb38e568bac1d361186

  • SHA512

    9d18dc8475a674409a9d3c6c72617251cfc3b064e498893bcfd6d7984ccee5e79e401aaaaa52944ad6b7b6a4003f2f7492fff3bfc2c755ba4901e4a93c985d21

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJhHd:V6a+pOtEvwDpjtzc

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_b30991b703bcb169fa74337d4f6a9683_cryptolocker

    • Size

      105KB

    • MD5

      b30991b703bcb169fa74337d4f6a9683

    • SHA1

      e1397b798f6f4a6f8238f25f63ed8d85eb5cf0c5

    • SHA256

      fd7e66ed3a7425f3b9cfeb390708b106feab5a32e9a7ecb38e568bac1d361186

    • SHA512

      9d18dc8475a674409a9d3c6c72617251cfc3b064e498893bcfd6d7984ccee5e79e401aaaaa52944ad6b7b6a4003f2f7492fff3bfc2c755ba4901e4a93c985d21

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJhHd:V6a+pOtEvwDpjtzc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks