Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-18_69c3cb0149875321072f299c2bf89b04_cryptolocker

  • Size

    95KB

  • Sample

    240318-qx3hcaaa48

  • MD5

    69c3cb0149875321072f299c2bf89b04

  • SHA1

    dec9fb1d69f3c20a158694beac0273df0d45081b

  • SHA256

    c111f50b794116cc24566a665d08db2b01eb04917f0d9eb5ed244f7e83e2de43

  • SHA512

    6b4878fb542b32cedc6e9456c879d63187db86d35c9ae2ee06ea24a8c82f7f7e6abc60808997dd8eba6ee2498e58e6f360b2607806892ed0b61730485bd1e2f3

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0a:V6a+pOtEvwDpjtzC

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_69c3cb0149875321072f299c2bf89b04_cryptolocker

    • Size

      95KB

    • MD5

      69c3cb0149875321072f299c2bf89b04

    • SHA1

      dec9fb1d69f3c20a158694beac0273df0d45081b

    • SHA256

      c111f50b794116cc24566a665d08db2b01eb04917f0d9eb5ed244f7e83e2de43

    • SHA512

      6b4878fb542b32cedc6e9456c879d63187db86d35c9ae2ee06ea24a8c82f7f7e6abc60808997dd8eba6ee2498e58e6f360b2607806892ed0b61730485bd1e2f3

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0a:V6a+pOtEvwDpjtzC

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks