Overview

overview

10

Static

static

10

2024-04-20...er.exe

windows7-x64

9

2024-04-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-20_3aafc916e8010986ba36db429a2f8ca8_cryptolocker

  • Size

    163KB

  • Sample

    240420-a1zmvsbf98

  • MD5

    3aafc916e8010986ba36db429a2f8ca8

  • SHA1

    93bd19be3c56c54a87c79170f6992e91907e2e94

  • SHA256

    39aa4411e6cf87cd4d6e31d3c5ab9993232bea8420421f4ee8d6aecc7dd14788

  • SHA512

    a3d9e4e3607ba542de44c246e407865f0b9c9af25b7ac738c0865a3cb28cc060f430603772e1fe2e719d33af4f6fdf0aea35a62099022f1e5697ab7cc6a9819d

  • SSDEEP

    1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMJ:u6a++OtEvwDpj6za

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_3aafc916e8010986ba36db429a2f8ca8_cryptolocker

    • Size

      163KB

    • MD5

      3aafc916e8010986ba36db429a2f8ca8

    • SHA1

      93bd19be3c56c54a87c79170f6992e91907e2e94

    • SHA256

      39aa4411e6cf87cd4d6e31d3c5ab9993232bea8420421f4ee8d6aecc7dd14788

    • SHA512

      a3d9e4e3607ba542de44c246e407865f0b9c9af25b7ac738c0865a3cb28cc060f430603772e1fe2e719d33af4f6fdf0aea35a62099022f1e5697ab7cc6a9819d

    • SSDEEP

      1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMJ:u6a++OtEvwDpj6za

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks