Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_481ff0ff051ee89a49a236a32cbd7490_cryptolocker

  • Size

    38KB

  • Sample

    240328-kgn25agd8z

  • MD5

    481ff0ff051ee89a49a236a32cbd7490

  • SHA1

    5c56e65fdd7685529900dda05e0d19e23c4e6301

  • SHA256

    54632430923df106d01d67c1e8c36e014a02a78c5c8e8f43120e4d6c5ea54e71

  • SHA512

    18c5aaee927fe9a1a5a40aa5f14b7a04eb5bcbf611975f25050b34e4b7c6475bce4e2a1fccaec53daf738bfe944c7a5b4ff90a64a2af9477de065a1ca55ea04d

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx31e:bxNrC7kYo1Fxf3s06gze

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_481ff0ff051ee89a49a236a32cbd7490_cryptolocker

    • Size

      38KB

    • MD5

      481ff0ff051ee89a49a236a32cbd7490

    • SHA1

      5c56e65fdd7685529900dda05e0d19e23c4e6301

    • SHA256

      54632430923df106d01d67c1e8c36e014a02a78c5c8e8f43120e4d6c5ea54e71

    • SHA512

      18c5aaee927fe9a1a5a40aa5f14b7a04eb5bcbf611975f25050b34e4b7c6475bce4e2a1fccaec53daf738bfe944c7a5b4ff90a64a2af9477de065a1ca55ea04d

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx31e:bxNrC7kYo1Fxf3s06gze

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks