Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_0164f86cb4464597862ff8ee0cfe9e7a_cryptolocker

  • Size

    386KB

  • Sample

    240315-d9btyafe5w

  • MD5

    0164f86cb4464597862ff8ee0cfe9e7a

  • SHA1

    f01f916550c7a4d021e410531b7d80a572d703f7

  • SHA256

    b8886396e40d76f23b041b914bae0e5d1b116699f3e0ca08b7ddeb31df657c67

  • SHA512

    57024fc223c38dc205472522e52c3efc8e8fc4e544edf5c8998d1d9e4383161d53f8744efbcdf663bdf15c6165a1a0cc35a7a6fb22ef1411364d1957b198039d

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR:nnOflT/ZFIjBz3xjTxynGUOUhXR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_0164f86cb4464597862ff8ee0cfe9e7a_cryptolocker

    • Size

      386KB

    • MD5

      0164f86cb4464597862ff8ee0cfe9e7a

    • SHA1

      f01f916550c7a4d021e410531b7d80a572d703f7

    • SHA256

      b8886396e40d76f23b041b914bae0e5d1b116699f3e0ca08b7ddeb31df657c67

    • SHA512

      57024fc223c38dc205472522e52c3efc8e8fc4e544edf5c8998d1d9e4383161d53f8744efbcdf663bdf15c6165a1a0cc35a7a6fb22ef1411364d1957b198039d

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR:nnOflT/ZFIjBz3xjTxynGUOUhXR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks