Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-16_cd98c36a8bc1d12283f3c776cab05c82_cryptolocker

  • Size

    31KB

  • Sample

    240316-lxph9sae66

  • MD5

    cd98c36a8bc1d12283f3c776cab05c82

  • SHA1

    a95c496b9ce833a013b57f750171440201579730

  • SHA256

    ace9732ed7b278eef31666aca1be97447a165cba31b6b41feb637bdd13eaccb1

  • SHA512

    012b45b5107d460a2cd0ddd17781ea4643e33873a8306343eba51dd8839ce4c11a3bce25d609d6d6a7cf79bdf44023a501dd5c54f07454d732321222c3578f02

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/BD:b7o/2n1TCraU6GD1a4Xt9t

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_cd98c36a8bc1d12283f3c776cab05c82_cryptolocker

    • Size

      31KB

    • MD5

      cd98c36a8bc1d12283f3c776cab05c82

    • SHA1

      a95c496b9ce833a013b57f750171440201579730

    • SHA256

      ace9732ed7b278eef31666aca1be97447a165cba31b6b41feb637bdd13eaccb1

    • SHA512

      012b45b5107d460a2cd0ddd17781ea4643e33873a8306343eba51dd8839ce4c11a3bce25d609d6d6a7cf79bdf44023a501dd5c54f07454d732321222c3578f02

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/BD:b7o/2n1TCraU6GD1a4Xt9t

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks