Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-18_eebeb278b684c79655d0066057d3e4bf_cryptolocker

  • Size

    79KB

  • Sample

    240318-zkwzgaae2y

  • MD5

    eebeb278b684c79655d0066057d3e4bf

  • SHA1

    e3b02a941699775fe1704aa8618e663d3404ec59

  • SHA256

    2b2f14d49875a2b3368e9002b44a024dbc851912cbcafb9e7d3dd87462745bb7

  • SHA512

    8b7c7931f3d35081d135f419488e6f263bad57a41f26f3ee750a15413d2b01e6fc981363a8d3438130a0a3234329a7428b8269647e917b314a343cafbcece380

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHN9v:vCjsIOtEvwDpj5H9YvQd2T

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_eebeb278b684c79655d0066057d3e4bf_cryptolocker

    • Size

      79KB

    • MD5

      eebeb278b684c79655d0066057d3e4bf

    • SHA1

      e3b02a941699775fe1704aa8618e663d3404ec59

    • SHA256

      2b2f14d49875a2b3368e9002b44a024dbc851912cbcafb9e7d3dd87462745bb7

    • SHA512

      8b7c7931f3d35081d135f419488e6f263bad57a41f26f3ee750a15413d2b01e6fc981363a8d3438130a0a3234329a7428b8269647e917b314a343cafbcece380

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHN9v:vCjsIOtEvwDpj5H9YvQd2T

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks