Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_27a738b4f95c166ac8f7582cc164ccb7_cryptolocker

  • Size

    101KB

  • Sample

    240328-nm4ljsbd3y

  • MD5

    27a738b4f95c166ac8f7582cc164ccb7

  • SHA1

    f778f916709e35dabd8c1c6716aca94c83aed2aa

  • SHA256

    e7eef58f9ee2263dcee5a00f9d4bf3413100dfe600900099f1bfa18cb7852490

  • SHA512

    1e753586b296bd255838684111b2a026414bc9a9894e7ce851e9ba93ccfb21605c834b084d3aee8d7bd4bee73c40eca8f49d45d42b607b01eccd12887a94c320

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJjN3z:V6a+pOtEvwDpjtzO

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_27a738b4f95c166ac8f7582cc164ccb7_cryptolocker

    • Size

      101KB

    • MD5

      27a738b4f95c166ac8f7582cc164ccb7

    • SHA1

      f778f916709e35dabd8c1c6716aca94c83aed2aa

    • SHA256

      e7eef58f9ee2263dcee5a00f9d4bf3413100dfe600900099f1bfa18cb7852490

    • SHA512

      1e753586b296bd255838684111b2a026414bc9a9894e7ce851e9ba93ccfb21605c834b084d3aee8d7bd4bee73c40eca8f49d45d42b607b01eccd12887a94c320

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJjN3z:V6a+pOtEvwDpjtzO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks