Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-18_ac618ad4064e8da3033e0384702a4555_cryptolocker

  • Size

    79KB

  • Sample

    240118-27menaegfp

  • MD5

    ac618ad4064e8da3033e0384702a4555

  • SHA1

    0712f28d37fb44687dd1912a21bd29353d6a1b2a

  • SHA256

    8f3ec4bc15482eddb839ef198be8156007611e00ac15e4706b58eb91245bdd7a

  • SHA512

    0c6b043fd6e6a3084fc456daecfd3390025cd7d5f1a44fe12c7abe5155fd0cd8d28ae079a238f6367a99f0ea00ddc8ddf6debdd9c7b2f2352396f4b05551cbf4

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHu5:vCjsIOtEvwDpj5H9YvQd2g

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_ac618ad4064e8da3033e0384702a4555_cryptolocker

    • Size

      79KB

    • MD5

      ac618ad4064e8da3033e0384702a4555

    • SHA1

      0712f28d37fb44687dd1912a21bd29353d6a1b2a

    • SHA256

      8f3ec4bc15482eddb839ef198be8156007611e00ac15e4706b58eb91245bdd7a

    • SHA512

      0c6b043fd6e6a3084fc456daecfd3390025cd7d5f1a44fe12c7abe5155fd0cd8d28ae079a238f6367a99f0ea00ddc8ddf6debdd9c7b2f2352396f4b05551cbf4

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHu5:vCjsIOtEvwDpj5H9YvQd2g

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks