Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_b4767a274699eee15c7cf85fc1272aab_cryptolocker

  • Size

    50KB

  • Sample

    240126-a1a99safe6

  • MD5

    b4767a274699eee15c7cf85fc1272aab

  • SHA1

    2dc6d43f2deb6bbec08de1ebc675c34987038103

  • SHA256

    795078c6298f5192584b07339b47b547df46793504ea5bf307ff7d76e341d4e9

  • SHA512

    c21162d00d928aad33c81163f1ab8ccaf7da233d1a30929c0a30ab0f6d09d88a18fe5a0c89d05de1b5ddfeed8cfcb87ed6ce3f484922625da32e254905d8fc88

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRN:79mqyNhQMOtEvwDpjBxe8TpXRN

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_b4767a274699eee15c7cf85fc1272aab_cryptolocker

    • Size

      50KB

    • MD5

      b4767a274699eee15c7cf85fc1272aab

    • SHA1

      2dc6d43f2deb6bbec08de1ebc675c34987038103

    • SHA256

      795078c6298f5192584b07339b47b547df46793504ea5bf307ff7d76e341d4e9

    • SHA512

      c21162d00d928aad33c81163f1ab8ccaf7da233d1a30929c0a30ab0f6d09d88a18fe5a0c89d05de1b5ddfeed8cfcb87ed6ce3f484922625da32e254905d8fc88

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRN:79mqyNhQMOtEvwDpjBxe8TpXRN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks