Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-18_91add22e69f10e0d410fcb425884bd6a_cryptolocker

  • Size

    387KB

  • Sample

    240318-mrpshseg68

  • MD5

    91add22e69f10e0d410fcb425884bd6a

  • SHA1

    e06d8a7b69e9e60d0c68d8e67f7e3f72c56f94cd

  • SHA256

    ac2e25ef4606cd1c90bb3b264d3f48658501393252d0be1b9b08c4bd7a109213

  • SHA512

    55069016e19d1e634ee1d66489cdbdf47d5682f2d36d9d5648f075c4f8fdf5d5ed9f1e8eb5a1978705dd7f7bbc6a863275cd56adb80fd3729e4de6ac2c8b218b

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX5:nnOflT/ZFIjBz3xjTxynGUOUhX5

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_91add22e69f10e0d410fcb425884bd6a_cryptolocker

    • Size

      387KB

    • MD5

      91add22e69f10e0d410fcb425884bd6a

    • SHA1

      e06d8a7b69e9e60d0c68d8e67f7e3f72c56f94cd

    • SHA256

      ac2e25ef4606cd1c90bb3b264d3f48658501393252d0be1b9b08c4bd7a109213

    • SHA512

      55069016e19d1e634ee1d66489cdbdf47d5682f2d36d9d5648f075c4f8fdf5d5ed9f1e8eb5a1978705dd7f7bbc6a863275cd56adb80fd3729e4de6ac2c8b218b

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX5:nnOflT/ZFIjBz3xjTxynGUOUhX5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks