Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-26_9d638eb47a03c208f367c930b495a48d_cryptolocker

  • Size

    34KB

  • Sample

    240326-2j1x5seb89

  • MD5

    9d638eb47a03c208f367c930b495a48d

  • SHA1

    5f67bc8f20a1068ac286eddbb5adaefd1fde8fe3

  • SHA256

    525a1fea5cfbadac827b4d62abb91430f1c5ee2969bee05a2c82e5e853897004

  • SHA512

    091d9bd6126a6a71b27054b66930bc93f9311dd2fa33db55dbafc934346e13f41257df365abe4b3180a3a3a0cd69155a51c5e2e63a67a65bf3579be32ad7f8c3

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZR:bAvJCYOOvbRPDEgXRcuM9HGVZR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_9d638eb47a03c208f367c930b495a48d_cryptolocker

    • Size

      34KB

    • MD5

      9d638eb47a03c208f367c930b495a48d

    • SHA1

      5f67bc8f20a1068ac286eddbb5adaefd1fde8fe3

    • SHA256

      525a1fea5cfbadac827b4d62abb91430f1c5ee2969bee05a2c82e5e853897004

    • SHA512

      091d9bd6126a6a71b27054b66930bc93f9311dd2fa33db55dbafc934346e13f41257df365abe4b3180a3a3a0cd69155a51c5e2e63a67a65bf3579be32ad7f8c3

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZR:bAvJCYOOvbRPDEgXRcuM9HGVZR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks