Overview

overview

10

Static

static

10

2024-03-14...er.exe

windows7-x64

9

2024-03-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-14_d2d248409b6546961cda808116365904_cryptolocker

  • Size

    91KB

  • Sample

    240314-ta7qbsac84

  • MD5

    d2d248409b6546961cda808116365904

  • SHA1

    db9b5c20873a54ac8b08688b9e36dc20f3d6c884

  • SHA256

    4a0fc5d03cc956156c433c886447eff182c315a30d8ac42f3cd202596099e76c

  • SHA512

    afe86261e245d63f093f2c9d76f937e5943a3fc7cb3759dd6a129a0209b8372e8b3d80116aebd0ff04808307b4a60c8b8657151d6596a6421d0d0b6c9f136941

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgu:V6a+pOtEvwDpjtzK

Score
10/10

Malware Config

Targets

    • Target

      2024-03-14_d2d248409b6546961cda808116365904_cryptolocker

    • Size

      91KB

    • MD5

      d2d248409b6546961cda808116365904

    • SHA1

      db9b5c20873a54ac8b08688b9e36dc20f3d6c884

    • SHA256

      4a0fc5d03cc956156c433c886447eff182c315a30d8ac42f3cd202596099e76c

    • SHA512

      afe86261e245d63f093f2c9d76f937e5943a3fc7cb3759dd6a129a0209b8372e8b3d80116aebd0ff04808307b4a60c8b8657151d6596a6421d0d0b6c9f136941

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgu:V6a+pOtEvwDpjtzK

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks