Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-27_db090e168ef64e7dd347718a8353a7a0_cryptolocker

  • Size

    35KB

  • Sample

    240327-b6z19ace7v

  • MD5

    db090e168ef64e7dd347718a8353a7a0

  • SHA1

    87414c59308639ea64d734fdf40d4df261eace51

  • SHA256

    f11fa58725698689c9507c7166608289fd52e2ec93c4eecb6d55b96f0fb51e49

  • SHA512

    3c678935213ebeccd403479958d083a25be15dd38ca9fe85c0cf2c2754ca8d4ba2716dad511cee849a9b27ff2fe34b8ec6642a56f63abbeef3abc67cfcafbdb9

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRR:btB9g/WItCSsAGjX7e9N0hunRR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_db090e168ef64e7dd347718a8353a7a0_cryptolocker

    • Size

      35KB

    • MD5

      db090e168ef64e7dd347718a8353a7a0

    • SHA1

      87414c59308639ea64d734fdf40d4df261eace51

    • SHA256

      f11fa58725698689c9507c7166608289fd52e2ec93c4eecb6d55b96f0fb51e49

    • SHA512

      3c678935213ebeccd403479958d083a25be15dd38ca9fe85c0cf2c2754ca8d4ba2716dad511cee849a9b27ff2fe34b8ec6642a56f63abbeef3abc67cfcafbdb9

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRR:btB9g/WItCSsAGjX7e9N0hunRR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks