Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-19_0a0db47cd517b2c85553e502e0100203_cryptolocker

  • Size

    69KB

  • Sample

    240319-z84dfsga63

  • MD5

    0a0db47cd517b2c85553e502e0100203

  • SHA1

    f36e10deed6070faa29f3bafc189d19585e331d6

  • SHA256

    6e75d3c9ddc1c404bca7d42566b73c23c046bb7b0c17097206865f928fecbffe

  • SHA512

    c49fa12c2cac91cac2bda273b099ed928343caeaf79e97dda4d67be5aefa5a5509c474f73434242fb0a1cea26c25e867289acede69a429a34997d0c389c0c00c

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUb0:DW60sllyWOtEvwDpjwF85i

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_0a0db47cd517b2c85553e502e0100203_cryptolocker

    • Size

      69KB

    • MD5

      0a0db47cd517b2c85553e502e0100203

    • SHA1

      f36e10deed6070faa29f3bafc189d19585e331d6

    • SHA256

      6e75d3c9ddc1c404bca7d42566b73c23c046bb7b0c17097206865f928fecbffe

    • SHA512

      c49fa12c2cac91cac2bda273b099ed928343caeaf79e97dda4d67be5aefa5a5509c474f73434242fb0a1cea26c25e867289acede69a429a34997d0c389c0c00c

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUb0:DW60sllyWOtEvwDpjwF85i

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks