Overview

overview

10

Static

static

10

2024-04-05...er.exe

windows7-x64

9

2024-04-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-05_3e9dd45aaf097e191d0e21a0d88e9746_cryptolocker

  • Size

    387KB

  • Sample

    240405-tz5l9sgh3t

  • MD5

    3e9dd45aaf097e191d0e21a0d88e9746

  • SHA1

    8fd92c8b039f303827e71d7ca8b5aea260952c53

  • SHA256

    6a7556221ec4c50a30179343f2e514cbce5b30918e4464460520d5409d2615e3

  • SHA512

    aa7f7e5330f995eb616d2f685810331a70d8af78028246c7467486cd631be731e0c5b0060d95fc35747d10f737c42f9f4610b79fdb533cd189db6f8c40a06820

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXD:nnOflT/ZFIjBz3xjTxynGUOUhXD

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_3e9dd45aaf097e191d0e21a0d88e9746_cryptolocker

    • Size

      387KB

    • MD5

      3e9dd45aaf097e191d0e21a0d88e9746

    • SHA1

      8fd92c8b039f303827e71d7ca8b5aea260952c53

    • SHA256

      6a7556221ec4c50a30179343f2e514cbce5b30918e4464460520d5409d2615e3

    • SHA512

      aa7f7e5330f995eb616d2f685810331a70d8af78028246c7467486cd631be731e0c5b0060d95fc35747d10f737c42f9f4610b79fdb533cd189db6f8c40a06820

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXD:nnOflT/ZFIjBz3xjTxynGUOUhXD

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks