Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_eac8de5a006953f6a92d1ccb3694e5a6_cryptolocker

  • Size

    386KB

  • Sample

    240315-ea62gafe91

  • MD5

    eac8de5a006953f6a92d1ccb3694e5a6

  • SHA1

    aeb2b379d4cb0005189fbdf8fd499b2b0def2092

  • SHA256

    a6d80d0a32909454c749d70e5d02665b19872bf78adcaed2ddf6945476e333df

  • SHA512

    6db4dd51f0017ca7de616b277924957db5d4d0ce8e0cd4431388073e906b5eaad0f6449aa1cfd30ca08921ffe4afaac9255ce5d58ae2bf6b96c77deab47f0ae4

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX1:nnOflT/ZFIjBz3xjTxynGUOUhX1

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_eac8de5a006953f6a92d1ccb3694e5a6_cryptolocker

    • Size

      386KB

    • MD5

      eac8de5a006953f6a92d1ccb3694e5a6

    • SHA1

      aeb2b379d4cb0005189fbdf8fd499b2b0def2092

    • SHA256

      a6d80d0a32909454c749d70e5d02665b19872bf78adcaed2ddf6945476e333df

    • SHA512

      6db4dd51f0017ca7de616b277924957db5d4d0ce8e0cd4431388073e906b5eaad0f6449aa1cfd30ca08921ffe4afaac9255ce5d58ae2bf6b96c77deab47f0ae4

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX1:nnOflT/ZFIjBz3xjTxynGUOUhX1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks