Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7268140635252b0a3d446e75ef403bdd_cryptolocker

  • Size

    27KB

  • Sample

    240125-a6ngsachej

  • MD5

    7268140635252b0a3d446e75ef403bdd

  • SHA1

    19a27087d92294e17488e9ddb8a393524c1d4324

  • SHA256

    8d0f68f90b6d16af2941309acb06b717738043c50c8583f461a422e6cf0c7248

  • SHA512

    05c705fc6a38d3b754c6eb7c35a19f0a961efb3b21413f79a73c86a69c3fe42bdf6808bae92baf31ed8f2d36f1da1953ee4bce3b982fc04d297bf1fb01042b6d

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzo7:b7o/2n1TCraU6GD1a4X8

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_7268140635252b0a3d446e75ef403bdd_cryptolocker

    • Size

      27KB

    • MD5

      7268140635252b0a3d446e75ef403bdd

    • SHA1

      19a27087d92294e17488e9ddb8a393524c1d4324

    • SHA256

      8d0f68f90b6d16af2941309acb06b717738043c50c8583f461a422e6cf0c7248

    • SHA512

      05c705fc6a38d3b754c6eb7c35a19f0a961efb3b21413f79a73c86a69c3fe42bdf6808bae92baf31ed8f2d36f1da1953ee4bce3b982fc04d297bf1fb01042b6d

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzo7:b7o/2n1TCraU6GD1a4X8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks