Overview

overview

10

Static

static

10

2024-04-05...er.exe

windows7-x64

9

2024-04-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-05_0106945a8f07ce109a34e925d172715f_cryptolocker

  • Size

    387KB

  • Sample

    240405-dx8m5sbf23

  • MD5

    0106945a8f07ce109a34e925d172715f

  • SHA1

    201fe813688c105eac8a2725da29fc2821e10c4f

  • SHA256

    4ba773bf6391481aee38a7555d87951b3abad0f3fca4829b9b5ae6af946068f3

  • SHA512

    ce992654e4fe5bc4c17d43af82a3982e0d9d6b1ad0e6948f2cdde3ff6e7370a877f069cbbb13346ac5694af11ce8158064f61783c219a20868bc130a7f0a9f2e

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXT:nnOflT/ZFIjBz3xjTxynGUOUhXT

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_0106945a8f07ce109a34e925d172715f_cryptolocker

    • Size

      387KB

    • MD5

      0106945a8f07ce109a34e925d172715f

    • SHA1

      201fe813688c105eac8a2725da29fc2821e10c4f

    • SHA256

      4ba773bf6391481aee38a7555d87951b3abad0f3fca4829b9b5ae6af946068f3

    • SHA512

      ce992654e4fe5bc4c17d43af82a3982e0d9d6b1ad0e6948f2cdde3ff6e7370a877f069cbbb13346ac5694af11ce8158064f61783c219a20868bc130a7f0a9f2e

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXT:nnOflT/ZFIjBz3xjTxynGUOUhXT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks