Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-29_650d9ac9932d1e85f7fc3e43b7bb17c9_cryptolocker

  • Size

    88KB

  • Sample

    240129-lk29laehh4

  • MD5

    650d9ac9932d1e85f7fc3e43b7bb17c9

  • SHA1

    879d8126ef9ff0edc8d79458c391bde7905cc754

  • SHA256

    ad35f702184d9195cae07f8ebab4a762335fc64bb3e6b6a2e700fc146a5241f9

  • SHA512

    8ea78b542d03cf3aa4ce9923654c3fc305e9076c0e64f21343aad232dc18c48d7f3d5eefc2b85a1c81cfd361b64875c04d543fbe4b04a3253731ae7e51dd5ee5

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNp/:vCjsIOtEvwDpj5H8zPsF

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_650d9ac9932d1e85f7fc3e43b7bb17c9_cryptolocker

    • Size

      88KB

    • MD5

      650d9ac9932d1e85f7fc3e43b7bb17c9

    • SHA1

      879d8126ef9ff0edc8d79458c391bde7905cc754

    • SHA256

      ad35f702184d9195cae07f8ebab4a762335fc64bb3e6b6a2e700fc146a5241f9

    • SHA512

      8ea78b542d03cf3aa4ce9923654c3fc305e9076c0e64f21343aad232dc18c48d7f3d5eefc2b85a1c81cfd361b64875c04d543fbe4b04a3253731ae7e51dd5ee5

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNp/:vCjsIOtEvwDpj5H8zPsF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks