Overview

overview

10

Static

static

10

2024-01-24...er.exe

windows7-x64

9

2024-01-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-24_b576bda23657ac5e8ecd634c6f6db9d0_cryptolocker

  • Size

    64KB

  • Sample

    240124-z9p78ahebj

  • MD5

    b576bda23657ac5e8ecd634c6f6db9d0

  • SHA1

    06cdf60f5bac40f02fb168d3cfa21e3c55271fcf

  • SHA256

    915036f24d6399ff24af5b90c8d5e7cdc1887810d8f646096699ba0011a0bbc6

  • SHA512

    ad28bdfc3b672478c425e9b30c99178aa786c97ba8b19c743e3b6324618ec39b35ec4993ff2400d00931c386364ac6efbbac93276c9a9ff779c8ced179b90558

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVv:ZVxkGOtEvwDpjcawl

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_b576bda23657ac5e8ecd634c6f6db9d0_cryptolocker

    • Size

      64KB

    • MD5

      b576bda23657ac5e8ecd634c6f6db9d0

    • SHA1

      06cdf60f5bac40f02fb168d3cfa21e3c55271fcf

    • SHA256

      915036f24d6399ff24af5b90c8d5e7cdc1887810d8f646096699ba0011a0bbc6

    • SHA512

      ad28bdfc3b672478c425e9b30c99178aa786c97ba8b19c743e3b6324618ec39b35ec4993ff2400d00931c386364ac6efbbac93276c9a9ff779c8ced179b90558

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVv:ZVxkGOtEvwDpjcawl

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks