Overview

overview

10

Static

static

10

2024-01-23...er.exe

windows7-x64

9

2024-01-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-23_89aab995756d4cd65499deebf0796c6d_cryptolocker

  • Size

    37KB

  • Sample

    240123-zpq9sahfak

  • MD5

    89aab995756d4cd65499deebf0796c6d

  • SHA1

    faebd8f0022a73457049c03905d9974723ee79a7

  • SHA256

    e6fd69ab598ca6cb13e6f5f74d55e4e1ad3429ee097ba661a46d79ae7b8db39d

  • SHA512

    0b8afedc062aea653097c6c2a3a512c494b2eeef3cd9d77583b55838069f590d321db9e8a7e635a58dc259a3acded7f9838791927530337fa48700b9a5dfcbb7

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwr0:btB9g/WItCSsAGjX7e9N0hunrkW0

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_89aab995756d4cd65499deebf0796c6d_cryptolocker

    • Size

      37KB

    • MD5

      89aab995756d4cd65499deebf0796c6d

    • SHA1

      faebd8f0022a73457049c03905d9974723ee79a7

    • SHA256

      e6fd69ab598ca6cb13e6f5f74d55e4e1ad3429ee097ba661a46d79ae7b8db39d

    • SHA512

      0b8afedc062aea653097c6c2a3a512c494b2eeef3cd9d77583b55838069f590d321db9e8a7e635a58dc259a3acded7f9838791927530337fa48700b9a5dfcbb7

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwr0:btB9g/WItCSsAGjX7e9N0hunrkW0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks