Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-19_41383e70b3dcb2c9abb1ab916cc880f4_cryptolocker

  • Size

    41KB

  • Sample

    240319-t3j5qshc2v

  • MD5

    41383e70b3dcb2c9abb1ab916cc880f4

  • SHA1

    702efa2ee60853078164dfc4c186ad0f26503180

  • SHA256

    1573a30d96795616fe174b2fc757bb84e298e67818c532fe513b5fa5c682897c

  • SHA512

    a0a3c9e54112cd88468754d4b8a9229e00c279771e2ff61be10b55569c170c7f3c6700fa65e9e033eac49f6caf42a782fa16402e090df79d8bdfd3c6a4f0a825

  • SSDEEP

    768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jto:bAvJCF+RQgJeab4sy/lc

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_41383e70b3dcb2c9abb1ab916cc880f4_cryptolocker

    • Size

      41KB

    • MD5

      41383e70b3dcb2c9abb1ab916cc880f4

    • SHA1

      702efa2ee60853078164dfc4c186ad0f26503180

    • SHA256

      1573a30d96795616fe174b2fc757bb84e298e67818c532fe513b5fa5c682897c

    • SHA512

      a0a3c9e54112cd88468754d4b8a9229e00c279771e2ff61be10b55569c170c7f3c6700fa65e9e033eac49f6caf42a782fa16402e090df79d8bdfd3c6a4f0a825

    • SSDEEP

      768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jto:bAvJCF+RQgJeab4sy/lc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks