Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-28_8320adecf79bb890b0ace51ddf7dd23f_cryptolocker

  • Size

    43KB

  • Sample

    240128-jeaahseba8

  • MD5

    8320adecf79bb890b0ace51ddf7dd23f

  • SHA1

    b19e149bf1f10553a2219c21c85021744516cdff

  • SHA256

    3602b895c7247245803094ba27b4ee7c20355d49fa493cb1df7914ab8193f38e

  • SHA512

    2cf27bcd83123c837d114383a6a94cfb73005583de388e9478f349cff47d8e1e44d54036df67bb523e8ac2c69b8877dcea4294c53bd3d867a115030702a0c48d

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YU+:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+o

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_8320adecf79bb890b0ace51ddf7dd23f_cryptolocker

    • Size

      43KB

    • MD5

      8320adecf79bb890b0ace51ddf7dd23f

    • SHA1

      b19e149bf1f10553a2219c21c85021744516cdff

    • SHA256

      3602b895c7247245803094ba27b4ee7c20355d49fa493cb1df7914ab8193f38e

    • SHA512

      2cf27bcd83123c837d114383a6a94cfb73005583de388e9478f349cff47d8e1e44d54036df67bb523e8ac2c69b8877dcea4294c53bd3d867a115030702a0c48d

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YU+:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+o

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks