Overview

overview

10

Static

static

10

2024-03-29...er.exe

windows7-x64

9

2024-03-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-29_49d517232bc9218054fb946ba9a02371_cryptolocker

  • Size

    72KB

  • Sample

    240329-dak9bsgc76

  • MD5

    49d517232bc9218054fb946ba9a02371

  • SHA1

    55012077ad1c454266b388b7bc9f4cfaf1c6075d

  • SHA256

    905503fee22606bec75f5a85bc29a95373b8e5f270a9ba0cc0531f271b3e6299

  • SHA512

    c00409a59438ffa347efe31f41a72c5f0935e2d24798980c6e1992a53196435e67537082c2fc082c15c239b1268a7542de0aa8f38098b216d487df20ea47085f

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KU8:ZVxkGOtEvwDpjcaI

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_49d517232bc9218054fb946ba9a02371_cryptolocker

    • Size

      72KB

    • MD5

      49d517232bc9218054fb946ba9a02371

    • SHA1

      55012077ad1c454266b388b7bc9f4cfaf1c6075d

    • SHA256

      905503fee22606bec75f5a85bc29a95373b8e5f270a9ba0cc0531f271b3e6299

    • SHA512

      c00409a59438ffa347efe31f41a72c5f0935e2d24798980c6e1992a53196435e67537082c2fc082c15c239b1268a7542de0aa8f38098b216d487df20ea47085f

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KU8:ZVxkGOtEvwDpjcaI

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks