Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-26_ec238a3fa819a320130910660d203afe_cryptolocker

  • Size

    49KB

  • Sample

    240326-gnmabsdd53

  • MD5

    ec238a3fa819a320130910660d203afe

  • SHA1

    8183e140e39d7f063014ecf6b9f1f9d67a472ba4

  • SHA256

    7b8165d0a67808636e3bd245e4627de6d67bd4484d6791dfedcd541c3944e3f0

  • SHA512

    71b01a752bd916b8421e1f76804a96fc0e6c38ceeb360f4f69307c43d40f32cc72c41efbb822c109c472475613928646d9e2d6f719a75d30fa99055ce52330a5

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSin:bgGYcA/53GAA6y37Q6dI+d5S

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_ec238a3fa819a320130910660d203afe_cryptolocker

    • Size

      49KB

    • MD5

      ec238a3fa819a320130910660d203afe

    • SHA1

      8183e140e39d7f063014ecf6b9f1f9d67a472ba4

    • SHA256

      7b8165d0a67808636e3bd245e4627de6d67bd4484d6791dfedcd541c3944e3f0

    • SHA512

      71b01a752bd916b8421e1f76804a96fc0e6c38ceeb360f4f69307c43d40f32cc72c41efbb822c109c472475613928646d9e2d6f719a75d30fa99055ce52330a5

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSin:bgGYcA/53GAA6y37Q6dI+d5S

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks