Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-16_a3692cb38d702689a5634f6ec3850a72_cryptolocker

  • Size

    36KB

  • Sample

    240316-e7vdyaca8x

  • MD5

    a3692cb38d702689a5634f6ec3850a72

  • SHA1

    93b350a37e80c39f76eed4806ecb85b45f31b921

  • SHA256

    8f8233280c59843d4cf43c10c6c47b15542d42a4119cf85159459e9e5ab355b3

  • SHA512

    23a9bddf238c85c435b14b352c9fd69f9ebfd694dce0e06e3c5f122bcbd803ff6de74f1062ef48031d6926380eda79fae8023acaf2850370c205f09c9c29f144

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7cCm:bxNrC7kYo1Fxf3s0cCm

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_a3692cb38d702689a5634f6ec3850a72_cryptolocker

    • Size

      36KB

    • MD5

      a3692cb38d702689a5634f6ec3850a72

    • SHA1

      93b350a37e80c39f76eed4806ecb85b45f31b921

    • SHA256

      8f8233280c59843d4cf43c10c6c47b15542d42a4119cf85159459e9e5ab355b3

    • SHA512

      23a9bddf238c85c435b14b352c9fd69f9ebfd694dce0e06e3c5f122bcbd803ff6de74f1062ef48031d6926380eda79fae8023acaf2850370c205f09c9c29f144

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7cCm:bxNrC7kYo1Fxf3s0cCm

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks