Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_8afe1ffd26e1e24a513bc6aaaf51569e_cryptolocker

  • Size

    32KB

  • Sample

    240315-yd46tsbd33

  • MD5

    8afe1ffd26e1e24a513bc6aaaf51569e

  • SHA1

    a5675d4a8b516d62d39dc6e49bdad429ae5ab3d6

  • SHA256

    4f6f5a004e940bb50d12b0164ec825a6fef20306aa1eb66d6f60c7c735c695eb

  • SHA512

    23aeb9b285d96f15a67b60cdb264d54de49bed9bcdcc76d177ccd43c005b0ac41b7aad3e4299e16a9e1b657a1a45672fcca889f993e41cf8192a3106073ffb8f

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+l:bAvJCYOOvbRPDEgXRc+BAIL6

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_8afe1ffd26e1e24a513bc6aaaf51569e_cryptolocker

    • Size

      32KB

    • MD5

      8afe1ffd26e1e24a513bc6aaaf51569e

    • SHA1

      a5675d4a8b516d62d39dc6e49bdad429ae5ab3d6

    • SHA256

      4f6f5a004e940bb50d12b0164ec825a6fef20306aa1eb66d6f60c7c735c695eb

    • SHA512

      23aeb9b285d96f15a67b60cdb264d54de49bed9bcdcc76d177ccd43c005b0ac41b7aad3e4299e16a9e1b657a1a45672fcca889f993e41cf8192a3106073ffb8f

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+l:bAvJCYOOvbRPDEgXRc+BAIL6

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks