Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-27_bb38de82ab77a4287d7a5a62979b27e5_cryptolocker

  • Size

    33KB

  • Sample

    240327-jggsdaff23

  • MD5

    bb38de82ab77a4287d7a5a62979b27e5

  • SHA1

    f1902a140926d78e71827b5a418ad3ff7abd8061

  • SHA256

    e1808c4788148bd920b4d4681382b4fa870a3812e64f5964c1d85a10e0a390f1

  • SHA512

    8da8f639bac4b987ce10c0e61f1eb13f42304da354b684560bb16b13c33a87ee3dc44376b5bddc54d13f7aa7a0a3bc085d49e4914c6e52edf4d8ce5e39eb9ae0

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+Bn:bAvJCYOOvbRPDEgXRc+BAILwn

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_bb38de82ab77a4287d7a5a62979b27e5_cryptolocker

    • Size

      33KB

    • MD5

      bb38de82ab77a4287d7a5a62979b27e5

    • SHA1

      f1902a140926d78e71827b5a418ad3ff7abd8061

    • SHA256

      e1808c4788148bd920b4d4681382b4fa870a3812e64f5964c1d85a10e0a390f1

    • SHA512

      8da8f639bac4b987ce10c0e61f1eb13f42304da354b684560bb16b13c33a87ee3dc44376b5bddc54d13f7aa7a0a3bc085d49e4914c6e52edf4d8ce5e39eb9ae0

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+Bn:bAvJCYOOvbRPDEgXRc+BAILwn

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks