Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-16_4b3dcf52ddc6386d8b94d576ec9d82b7_cryptolocker

  • Size

    44KB

  • Sample

    240316-nvnv3aac5s

  • MD5

    4b3dcf52ddc6386d8b94d576ec9d82b7

  • SHA1

    ec5fda0c8bee3e5e8e38011e4b4780a1b651ff45

  • SHA256

    cddd5e5e9c96d9bc417dbaf6b5ccdc60039663beac75db6d7104be40647716fd

  • SHA512

    09d05d19730f14a5ec8bf0bc2c32e7eaabf6850c7cce5c7fb1c2213bcc693ca88f89c170fa39040c3afed70de7a6eddc6fc42a09363175e3e0511f2b46574532

  • SSDEEP

    768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5Q:btB9g/xtCSKfxLIc/Y

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_4b3dcf52ddc6386d8b94d576ec9d82b7_cryptolocker

    • Size

      44KB

    • MD5

      4b3dcf52ddc6386d8b94d576ec9d82b7

    • SHA1

      ec5fda0c8bee3e5e8e38011e4b4780a1b651ff45

    • SHA256

      cddd5e5e9c96d9bc417dbaf6b5ccdc60039663beac75db6d7104be40647716fd

    • SHA512

      09d05d19730f14a5ec8bf0bc2c32e7eaabf6850c7cce5c7fb1c2213bcc693ca88f89c170fa39040c3afed70de7a6eddc6fc42a09363175e3e0511f2b46574532

    • SSDEEP

      768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5Q:btB9g/xtCSKfxLIc/Y

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks