Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_0b0a5b571d223244d39fd8dfffcc513a_cryptolocker

  • Size

    82KB

  • Sample

    240328-y7e4ssge54

  • MD5

    0b0a5b571d223244d39fd8dfffcc513a

  • SHA1

    8eb152259c6f1b3d697433902efce794e298a6ff

  • SHA256

    69446e6ae40427694c802a6d6fec006644924409828a4d48e370789861db511d

  • SHA512

    952b626694ff8b13889db8aedaa4a96de2630955e029b70d1202802ef40c627a3f5d8877838196ce0dafd0d59a2e34acf35ac1b967238d1abbe24fcdf32bc9a7

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMy6N:TCjsIOtEvwDpj5HE/OUHnSMT

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_0b0a5b571d223244d39fd8dfffcc513a_cryptolocker

    • Size

      82KB

    • MD5

      0b0a5b571d223244d39fd8dfffcc513a

    • SHA1

      8eb152259c6f1b3d697433902efce794e298a6ff

    • SHA256

      69446e6ae40427694c802a6d6fec006644924409828a4d48e370789861db511d

    • SHA512

      952b626694ff8b13889db8aedaa4a96de2630955e029b70d1202802ef40c627a3f5d8877838196ce0dafd0d59a2e34acf35ac1b967238d1abbe24fcdf32bc9a7

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMy6N:TCjsIOtEvwDpj5HE/OUHnSMT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks