Overview

overview

10

Static

static

10

2024-03-13...er.exe

windows7-x64

2024-03-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-13_f6a209844d8349f17cbb209c16d351a7_cryptolocker

  • Size

    67KB

  • Sample

    240313-cfxzmshf6v

  • MD5

    f6a209844d8349f17cbb209c16d351a7

  • SHA1

    a2b5f8fa064b856005222bce826c76a3080f9167

  • SHA256

    bea330104ae544dad10ddb65393dc64cc4abfffcc37b71ad86daf32d3b0efd78

  • SHA512

    9617bf7477caf9833977876dc9f74213a3fc6177f4a9ec2b16625cc83d0cba892bd7a1af20d3d1264c885d07d6a2d7e7aed8d9f9002463ce2b6d31e429e344bc

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVp0:ZVxkGOtEvwDpjcawg

Score
10/10

Malware Config

Targets

    • Target

      2024-03-13_f6a209844d8349f17cbb209c16d351a7_cryptolocker

    • Size

      67KB

    • MD5

      f6a209844d8349f17cbb209c16d351a7

    • SHA1

      a2b5f8fa064b856005222bce826c76a3080f9167

    • SHA256

      bea330104ae544dad10ddb65393dc64cc4abfffcc37b71ad86daf32d3b0efd78

    • SHA512

      9617bf7477caf9833977876dc9f74213a3fc6177f4a9ec2b16625cc83d0cba892bd7a1af20d3d1264c885d07d6a2d7e7aed8d9f9002463ce2b6d31e429e344bc

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVp0:ZVxkGOtEvwDpjcawg

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks