Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_8bb2d4eb86710dc03f5ae10b41794eca_cryptolocker

  • Size

    57KB

  • Sample

    240128-x7y18sabdk

  • MD5

    8bb2d4eb86710dc03f5ae10b41794eca

  • SHA1

    ecfcb7bc0fb7f4d004e9714642e01c8a68443cd5

  • SHA256

    e513f6a86c7c22f2f160b7eaca4e88899a3c607b4cf139dea845193db19a5859

  • SHA512

    dd5b0ed5c22043f6569ef77a881fe5dfa4413e02d3f4560d9d141fd0a3cd2232742778b444c2a3980fbfc50f1181f66652642c5b56d8b5b7f586ecb6f37dffea

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61PTt:BbdDmjr+OtEvwDpjMv

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_8bb2d4eb86710dc03f5ae10b41794eca_cryptolocker

    • Size

      57KB

    • MD5

      8bb2d4eb86710dc03f5ae10b41794eca

    • SHA1

      ecfcb7bc0fb7f4d004e9714642e01c8a68443cd5

    • SHA256

      e513f6a86c7c22f2f160b7eaca4e88899a3c607b4cf139dea845193db19a5859

    • SHA512

      dd5b0ed5c22043f6569ef77a881fe5dfa4413e02d3f4560d9d141fd0a3cd2232742778b444c2a3980fbfc50f1181f66652642c5b56d8b5b7f586ecb6f37dffea

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61PTt:BbdDmjr+OtEvwDpjMv

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks