Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-26_2ff03f9931c6a92b7a678b0491815efb_cryptolocker

  • Size

    386KB

  • Sample

    240326-yha4jsde91

  • MD5

    2ff03f9931c6a92b7a678b0491815efb

  • SHA1

    3824da0c16f68b2e5e0879b4defb7788b412386c

  • SHA256

    b2b3cfecd0350ca1a54b570649eb53c8e08515154ff5b6ab5f28d1371565ef7c

  • SHA512

    32429a196259cbca944f7fea006d10caabacf39a16c12e75df06b73eae72f1eb4559811b2352e1a5fe84edae34482c98b17263f2b13e3bcf29debf7ebe60e7ae

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_2ff03f9931c6a92b7a678b0491815efb_cryptolocker

    • Size

      386KB

    • MD5

      2ff03f9931c6a92b7a678b0491815efb

    • SHA1

      3824da0c16f68b2e5e0879b4defb7788b412386c

    • SHA256

      b2b3cfecd0350ca1a54b570649eb53c8e08515154ff5b6ab5f28d1371565ef7c

    • SHA512

      32429a196259cbca944f7fea006d10caabacf39a16c12e75df06b73eae72f1eb4559811b2352e1a5fe84edae34482c98b17263f2b13e3bcf29debf7ebe60e7ae

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks