Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-26_b11dbc56b7131222ef1ba5083f3d4d1b_cryptolocker

  • Size

    41KB

  • Sample

    240326-ggmbragb8w

  • MD5

    b11dbc56b7131222ef1ba5083f3d4d1b

  • SHA1

    3e8e06131c5d3e972aed1df538d25be337575062

  • SHA256

    9bf887422f9caa6d1bafcc728602df7fe5e3a6364612d5ba248720af48bd4291

  • SHA512

    7d28365ec07dfb50b71c23907b324d9efd18ff470e95156d7187ff93609096867e98c50c921a162744d29d6448a5dd2484b7a0d0d92d554ceca9290bc79e6592

  • SSDEEP

    768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/O7O:bAvJCF+RQgJeab4sy/ll

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_b11dbc56b7131222ef1ba5083f3d4d1b_cryptolocker

    • Size

      41KB

    • MD5

      b11dbc56b7131222ef1ba5083f3d4d1b

    • SHA1

      3e8e06131c5d3e972aed1df538d25be337575062

    • SHA256

      9bf887422f9caa6d1bafcc728602df7fe5e3a6364612d5ba248720af48bd4291

    • SHA512

      7d28365ec07dfb50b71c23907b324d9efd18ff470e95156d7187ff93609096867e98c50c921a162744d29d6448a5dd2484b7a0d0d92d554ceca9290bc79e6592

    • SSDEEP

      768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/O7O:bAvJCF+RQgJeab4sy/ll

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks