Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-26_bb4e4cb9c547e9058930643f1177e0f2_cryptolocker

  • Size

    50KB

  • Sample

    240326-aramdadg91

  • MD5

    bb4e4cb9c547e9058930643f1177e0f2

  • SHA1

    3cb9199191a9e449b48f84199293f037cc7cec08

  • SHA256

    dec875f59fe278893404827f9987e1d961d87d845b0af73b2602e35ecaa1bd40

  • SHA512

    9af7aacb6e170ef6cf192af19bd306e921b79885458615a87ec184cabad8bb9e58726cffa9a05387c5a78c824bba123b1e721c547b303c976768d69872e40ae8

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO6:bgGYcA/53GAA6y37Q6dI+d5N

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_bb4e4cb9c547e9058930643f1177e0f2_cryptolocker

    • Size

      50KB

    • MD5

      bb4e4cb9c547e9058930643f1177e0f2

    • SHA1

      3cb9199191a9e449b48f84199293f037cc7cec08

    • SHA256

      dec875f59fe278893404827f9987e1d961d87d845b0af73b2602e35ecaa1bd40

    • SHA512

      9af7aacb6e170ef6cf192af19bd306e921b79885458615a87ec184cabad8bb9e58726cffa9a05387c5a78c824bba123b1e721c547b303c976768d69872e40ae8

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO6:bgGYcA/53GAA6y37Q6dI+d5N

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks