Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-18_f6b57642b88d26cb0a05d6fb53cf96a2_cryptolocker

  • Size

    38KB

  • Sample

    240318-1km71aaf93

  • MD5

    f6b57642b88d26cb0a05d6fb53cf96a2

  • SHA1

    13eab2ca7f2d1938c7b1b9d10de90910ab469dfd

  • SHA256

    b30f48a28567c986589440944aa76f9a5c27973f7883d4a866082b60e37be4c5

  • SHA512

    24c9d438c831ee1d0d6eb71091dba30d8e7eac029e18dc33bfbc38ff8dc19af6b47edef79a1abb2c7e193b7f48a12430d51afd8ca765e33411311aa6438bc36a

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenB8vfN:ZzFbxmLPWQMOtEvwDpjLeSfN

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_f6b57642b88d26cb0a05d6fb53cf96a2_cryptolocker

    • Size

      38KB

    • MD5

      f6b57642b88d26cb0a05d6fb53cf96a2

    • SHA1

      13eab2ca7f2d1938c7b1b9d10de90910ab469dfd

    • SHA256

      b30f48a28567c986589440944aa76f9a5c27973f7883d4a866082b60e37be4c5

    • SHA512

      24c9d438c831ee1d0d6eb71091dba30d8e7eac029e18dc33bfbc38ff8dc19af6b47edef79a1abb2c7e193b7f48a12430d51afd8ca765e33411311aa6438bc36a

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenB8vfN:ZzFbxmLPWQMOtEvwDpjLeSfN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks