Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_dc7e37c6f1f2c1cc8068a8b9879e2f12_cryptolocker

  • Size

    70KB

  • Sample

    240312-talsvsch3w

  • MD5

    dc7e37c6f1f2c1cc8068a8b9879e2f12

  • SHA1

    4efa5644c1638655b5f8a3b6309a25c18f1e59e6

  • SHA256

    b3055363440a0c34b0161a60ae1294138ce6c5e0dff29ce6e8db649db0b868a2

  • SHA512

    7ddc042327a616d99474eefcb6533d2d12372bef9ffd57b8c37cd5b7f545d0d35eae4381ca0d4b9941185631999a480c59d1c212ba0a5c926f1a300901097634

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4wYPsED3VK2+ZtyOjgO4r9vFAg2rqk63Ygv:vj+jsMQMOtEvwDpj5HwYYTjipvF2hg

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_dc7e37c6f1f2c1cc8068a8b9879e2f12_cryptolocker

    • Size

      70KB

    • MD5

      dc7e37c6f1f2c1cc8068a8b9879e2f12

    • SHA1

      4efa5644c1638655b5f8a3b6309a25c18f1e59e6

    • SHA256

      b3055363440a0c34b0161a60ae1294138ce6c5e0dff29ce6e8db649db0b868a2

    • SHA512

      7ddc042327a616d99474eefcb6533d2d12372bef9ffd57b8c37cd5b7f545d0d35eae4381ca0d4b9941185631999a480c59d1c212ba0a5c926f1a300901097634

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4wYPsED3VK2+ZtyOjgO4r9vFAg2rqk63Ygv:vj+jsMQMOtEvwDpj5HwYYTjipvF2hg

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks