Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_e44de1456aa05b9670012786f3836a25_cryptolocker

  • Size

    49KB

  • Sample

    240328-k1lq4seg42

  • MD5

    e44de1456aa05b9670012786f3836a25

  • SHA1

    210d2efffe5fbf88dafc1c9da15fb46e9c596267

  • SHA256

    c49f7f4df52a23389f2f80890527019164bbf31fec3e9ac7ea3932ddea998d18

  • SHA512

    7ebecf1690d126e5162dce12b4b83b7f201c42920c0f6b9e7c3d2cef6add86b40f7f86949805cc4223b0d912d20d73b7b1c8cc1745867106cc381a0fa833a358

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGu:79mqyNhQMOtEvwDpjBxe8GGu

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_e44de1456aa05b9670012786f3836a25_cryptolocker

    • Size

      49KB

    • MD5

      e44de1456aa05b9670012786f3836a25

    • SHA1

      210d2efffe5fbf88dafc1c9da15fb46e9c596267

    • SHA256

      c49f7f4df52a23389f2f80890527019164bbf31fec3e9ac7ea3932ddea998d18

    • SHA512

      7ebecf1690d126e5162dce12b4b83b7f201c42920c0f6b9e7c3d2cef6add86b40f7f86949805cc4223b0d912d20d73b7b1c8cc1745867106cc381a0fa833a358

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGu:79mqyNhQMOtEvwDpjBxe8GGu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks