Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-29_95f9388570e0c3f1e22a8cd82620a7fb_cryptolocker

  • Size

    147KB

  • Sample

    240129-atyf8aeah5

  • MD5

    95f9388570e0c3f1e22a8cd82620a7fb

  • SHA1

    ef65888cb586b669941612216333a428864c368d

  • SHA256

    617513b6c765c48ced9c0b9d826172470465b2f3d727de333f59d67b27e445e1

  • SHA512

    931345f06ea1db8997053557d8cc8a35a87009613e39dbfb21ce36596520ac2fe8fd5e4c9da9c8c9b1b7d0a5da9e24d46518596eeed72b7a634769cc21eec056

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPF+V:V6a+pOtEvwDpjt22U

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_95f9388570e0c3f1e22a8cd82620a7fb_cryptolocker

    • Size

      147KB

    • MD5

      95f9388570e0c3f1e22a8cd82620a7fb

    • SHA1

      ef65888cb586b669941612216333a428864c368d

    • SHA256

      617513b6c765c48ced9c0b9d826172470465b2f3d727de333f59d67b27e445e1

    • SHA512

      931345f06ea1db8997053557d8cc8a35a87009613e39dbfb21ce36596520ac2fe8fd5e4c9da9c8c9b1b7d0a5da9e24d46518596eeed72b7a634769cc21eec056

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPF+V:V6a+pOtEvwDpjt22U

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks