Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-27_78cf1feee36e4361d2819666b0a75884_cryptolocker

  • Size

    32KB

  • Sample

    240327-mnjgbsac52

  • MD5

    78cf1feee36e4361d2819666b0a75884

  • SHA1

    bf432c208d13a749605ae20d36ec6d23ed66d86d

  • SHA256

    4b9363ffd1ad7ad620d1c5ae490157bc5fa4a9bccef29205e97d2b74a156143e

  • SHA512

    9e582085052084f913a9f2da1fdd114a247bfe823c4b935f83fe97db770ae370d4a0c3316f9db9f461881b4f4544f68e34f4fad248efcfadc179bf6e7178ddad

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bbl:b7o/2n1TCraU6GD1a4Xt9H

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_78cf1feee36e4361d2819666b0a75884_cryptolocker

    • Size

      32KB

    • MD5

      78cf1feee36e4361d2819666b0a75884

    • SHA1

      bf432c208d13a749605ae20d36ec6d23ed66d86d

    • SHA256

      4b9363ffd1ad7ad620d1c5ae490157bc5fa4a9bccef29205e97d2b74a156143e

    • SHA512

      9e582085052084f913a9f2da1fdd114a247bfe823c4b935f83fe97db770ae370d4a0c3316f9db9f461881b4f4544f68e34f4fad248efcfadc179bf6e7178ddad

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bbl:b7o/2n1TCraU6GD1a4Xt9H

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks