Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-19_da070fa885901e47ed09aa6af97aedd6_cryptolocker

  • Size

    386KB

  • Sample

    240319-lyjz6shf71

  • MD5

    da070fa885901e47ed09aa6af97aedd6

  • SHA1

    f622d41ffcb9485cde7aa9d07fa9424c770efab7

  • SHA256

    2b34c1d27e36767171e42423602f30d1fdbdaca616f23193087db070bcabbd7a

  • SHA512

    195917bd61607290460eb8d175c76a1dd28c92521fd2aee8e566bcb54a65fc96a7f8875f788524fa04c827e0367bc22959399217d1e6f405d487cba9ea060975

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXY:nnOflT/ZFIjBz3xjTxynGUOUhXY

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_da070fa885901e47ed09aa6af97aedd6_cryptolocker

    • Size

      386KB

    • MD5

      da070fa885901e47ed09aa6af97aedd6

    • SHA1

      f622d41ffcb9485cde7aa9d07fa9424c770efab7

    • SHA256

      2b34c1d27e36767171e42423602f30d1fdbdaca616f23193087db070bcabbd7a

    • SHA512

      195917bd61607290460eb8d175c76a1dd28c92521fd2aee8e566bcb54a65fc96a7f8875f788524fa04c827e0367bc22959399217d1e6f405d487cba9ea060975

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXY:nnOflT/ZFIjBz3xjTxynGUOUhXY

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks