Overview

overview

10

Static

static

10

2024-03-29...er.exe

windows7-x64

9

2024-03-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-29_e847078f8a43e3dffb42697abd9f0749_cryptolocker

  • Size

    52KB

  • Sample

    240329-eckk9aha3y

  • MD5

    e847078f8a43e3dffb42697abd9f0749

  • SHA1

    1c0d20e441587749492a3121fa5ad054e1a6570d

  • SHA256

    4949949955c6c3ae04979c308450a4b87b5959bd19adbaf767159de712ded7a8

  • SHA512

    d252f8e97faead898da48b59fd927fe11d6fa95176a30fe9d5c6799e2bf61ebb3687b3d82128117fd6e194c2922312f97f9eccdf614466f9f6c4604b181817e9

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NImsjh:bIDOw9a0DwitDZzwI9h

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_e847078f8a43e3dffb42697abd9f0749_cryptolocker

    • Size

      52KB

    • MD5

      e847078f8a43e3dffb42697abd9f0749

    • SHA1

      1c0d20e441587749492a3121fa5ad054e1a6570d

    • SHA256

      4949949955c6c3ae04979c308450a4b87b5959bd19adbaf767159de712ded7a8

    • SHA512

      d252f8e97faead898da48b59fd927fe11d6fa95176a30fe9d5c6799e2bf61ebb3687b3d82128117fd6e194c2922312f97f9eccdf614466f9f6c4604b181817e9

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NImsjh:bIDOw9a0DwitDZzwI9h

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks