Overview

overview

10

Static

static

10

2024-03-13...er.exe

windows7-x64

9

2024-03-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-13_5815fba7b5ab13401956fce3f99a76be_cryptolocker

  • Size

    387KB

  • Sample

    240313-e9rqtsch4s

  • MD5

    5815fba7b5ab13401956fce3f99a76be

  • SHA1

    da3922057b8a12bb01e9314d4071af19308cefff

  • SHA256

    a24911daf1662ecbc3750243fb75486d5a071fad67df23370dfe5d402ae4d2fe

  • SHA512

    e325ab887435228db083face659e27158b4ead71b2a34561bc151865bcfd0fa5d300bf28b0904bb0c9eda04a2ac4393282868f4e64c6a893f7151b5bfff191e6

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXp:nnOflT/ZFIjBz3xjTxynGUOUhXp

Score
10/10

Malware Config

Targets

    • Target

      2024-03-13_5815fba7b5ab13401956fce3f99a76be_cryptolocker

    • Size

      387KB

    • MD5

      5815fba7b5ab13401956fce3f99a76be

    • SHA1

      da3922057b8a12bb01e9314d4071af19308cefff

    • SHA256

      a24911daf1662ecbc3750243fb75486d5a071fad67df23370dfe5d402ae4d2fe

    • SHA512

      e325ab887435228db083face659e27158b4ead71b2a34561bc151865bcfd0fa5d300bf28b0904bb0c9eda04a2ac4393282868f4e64c6a893f7151b5bfff191e6

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXp:nnOflT/ZFIjBz3xjTxynGUOUhXp

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks