Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_4d9e42f9ce001dec1d4278d1f068fba6_cryptolocker

  • Size

    61KB

  • Sample

    240127-2brz9sdee2

  • MD5

    4d9e42f9ce001dec1d4278d1f068fba6

  • SHA1

    a0a3a53994218fea7aa43e2aad4b0b638a9bc1e6

  • SHA256

    27d29d572b129d75577e38f2284f54804794259c11cbb516960c8cb794254562

  • SHA512

    a21c1b88e03c8c19baa1b3e6d10f3074b545bbf3e4d2b02a6dbb80163219562b89938518e401f78f9b5ad0d051fc0c3635d6c3db4e85d36c99e48d01c665ce7c

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xEdu:X6a+SOtEvwDpjBrO9

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_4d9e42f9ce001dec1d4278d1f068fba6_cryptolocker

    • Size

      61KB

    • MD5

      4d9e42f9ce001dec1d4278d1f068fba6

    • SHA1

      a0a3a53994218fea7aa43e2aad4b0b638a9bc1e6

    • SHA256

      27d29d572b129d75577e38f2284f54804794259c11cbb516960c8cb794254562

    • SHA512

      a21c1b88e03c8c19baa1b3e6d10f3074b545bbf3e4d2b02a6dbb80163219562b89938518e401f78f9b5ad0d051fc0c3635d6c3db4e85d36c99e48d01c665ce7c

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xEdu:X6a+SOtEvwDpjBrO9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks