Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_8b29d4d0d0f56797125a7877e5cf0d0a_cryptolocker

  • Size

    60KB

  • Sample

    240129-cyrwcahdaq

  • MD5

    8b29d4d0d0f56797125a7877e5cf0d0a

  • SHA1

    193a4371fd792252a3d13b059dc63e5401779ef1

  • SHA256

    4316886c5bfa490e6bc9aa8d45dc0a6b290240b1d1c1cce9898ecafb7d71af24

  • SHA512

    e8e7013b27d430313fa7e346ee3e987df0c5dcf3e129195e11263f1c0aee9e4fa5e2f3314e6b0e3a41977e77470b92e51a35f46bc93234f51f372d6f09d0a932

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTR:TCjsIOtEvwDpj5HE/OUHnSM2

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_8b29d4d0d0f56797125a7877e5cf0d0a_cryptolocker

    • Size

      60KB

    • MD5

      8b29d4d0d0f56797125a7877e5cf0d0a

    • SHA1

      193a4371fd792252a3d13b059dc63e5401779ef1

    • SHA256

      4316886c5bfa490e6bc9aa8d45dc0a6b290240b1d1c1cce9898ecafb7d71af24

    • SHA512

      e8e7013b27d430313fa7e346ee3e987df0c5dcf3e129195e11263f1c0aee9e4fa5e2f3314e6b0e3a41977e77470b92e51a35f46bc93234f51f372d6f09d0a932

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTR:TCjsIOtEvwDpj5HE/OUHnSM2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks