Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_bc3d7c3722ca929e0126d61f393f4fc1_cryptolocker

  • Size

    40KB

  • Sample

    240328-yb68eaef31

  • MD5

    bc3d7c3722ca929e0126d61f393f4fc1

  • SHA1

    45701cc53fe47466f0abdff53b8e6a23dca7cdf6

  • SHA256

    b8743ecbf34a52abdba0d9cfadfa3250e630cc465006a28763f514deb9bbedfd

  • SHA512

    7d4d78696587d10104dcdc173fc447fe34a22f246cceb762955ea0e1c7ff57e76a69ed3f20743e0e4da5738f4cb7dbab730f5a0f84ee80a350c37df1b16fa62a

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLJJziCs:ZzFbxmLPWQMOtEvwDpjLeU3C

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_bc3d7c3722ca929e0126d61f393f4fc1_cryptolocker

    • Size

      40KB

    • MD5

      bc3d7c3722ca929e0126d61f393f4fc1

    • SHA1

      45701cc53fe47466f0abdff53b8e6a23dca7cdf6

    • SHA256

      b8743ecbf34a52abdba0d9cfadfa3250e630cc465006a28763f514deb9bbedfd

    • SHA512

      7d4d78696587d10104dcdc173fc447fe34a22f246cceb762955ea0e1c7ff57e76a69ed3f20743e0e4da5738f4cb7dbab730f5a0f84ee80a350c37df1b16fa62a

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLJJziCs:ZzFbxmLPWQMOtEvwDpjLeU3C

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks