Overview

overview

10

Static

static

10

2024-03-25...er.exe

windows7-x64

9

2024-03-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-25_cb8b68854fd98073d516637e64073ca7_cryptolocker

  • Size

    37KB

  • Sample

    240325-nzg83shg21

  • MD5

    cb8b68854fd98073d516637e64073ca7

  • SHA1

    1789d8ae681128729a2fce8e2202972e46595553

  • SHA256

    ee1fadc7ae2d4c45d37563153946b13347e8c15ac5eb4d646f8b0749031cd875

  • SHA512

    e5095e35444da4ae83ef78022d471c4e3e575896514e8e3f7be0631f537f412baebc7c1de870602b5196fa7ef81281a4f7e2aad56b80327eb5be38bee161a2fe

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrm:vj+jsMQMOtEvwDpj5HcSY/m

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_cb8b68854fd98073d516637e64073ca7_cryptolocker

    • Size

      37KB

    • MD5

      cb8b68854fd98073d516637e64073ca7

    • SHA1

      1789d8ae681128729a2fce8e2202972e46595553

    • SHA256

      ee1fadc7ae2d4c45d37563153946b13347e8c15ac5eb4d646f8b0749031cd875

    • SHA512

      e5095e35444da4ae83ef78022d471c4e3e575896514e8e3f7be0631f537f412baebc7c1de870602b5196fa7ef81281a4f7e2aad56b80327eb5be38bee161a2fe

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrm:vj+jsMQMOtEvwDpj5HcSY/m

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks