Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-18_343079c68c01b60693ba80c2005ae365_cryptolocker

  • Size

    40KB

  • Sample

    240318-tyk68sdf4y

  • MD5

    343079c68c01b60693ba80c2005ae365

  • SHA1

    8fa168f9cf8988db09634b941e2cba06cdac02db

  • SHA256

    8e6c6a863dce567b3fdf70000b143af814866c96746e06eb50bee148d29c00e3

  • SHA512

    ec57f2a039ada59278c2c3d2e9087b6f044ea7b6f23ac5f9b016209d56d305979c43b7f15c52f50c517268e35e5476dae3f86e9a54d62d949d6218807f9cc1a5

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzV:V6QFElP6n+gMQMOtEvwDpjyaYaFAs

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_343079c68c01b60693ba80c2005ae365_cryptolocker

    • Size

      40KB

    • MD5

      343079c68c01b60693ba80c2005ae365

    • SHA1

      8fa168f9cf8988db09634b941e2cba06cdac02db

    • SHA256

      8e6c6a863dce567b3fdf70000b143af814866c96746e06eb50bee148d29c00e3

    • SHA512

      ec57f2a039ada59278c2c3d2e9087b6f044ea7b6f23ac5f9b016209d56d305979c43b7f15c52f50c517268e35e5476dae3f86e9a54d62d949d6218807f9cc1a5

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzV:V6QFElP6n+gMQMOtEvwDpjyaYaFAs

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks