Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-29_d2e73ae861b7879130f95148e67fc121_cryptolocker

  • Size

    127KB

  • Sample

    240129-n7spsahdc6

  • MD5

    d2e73ae861b7879130f95148e67fc121

  • SHA1

    080a6a93fad9fc2c84d80d44b03b0045edf487af

  • SHA256

    1c0fccd61af0a8532b565c51b6d7770d49a4cffcb6564656aab402785094cf37

  • SHA512

    36609101726084c7721619381fec8c7492fe07db752151ffd7e5250c78e1e94fb69b585788efbbfb4e7fda88fe0964f5878dfb878a8c473018f33610c2be0e8e

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//0:vCjsIOtEvwDpj5H9YvQd2RG

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_d2e73ae861b7879130f95148e67fc121_cryptolocker

    • Size

      127KB

    • MD5

      d2e73ae861b7879130f95148e67fc121

    • SHA1

      080a6a93fad9fc2c84d80d44b03b0045edf487af

    • SHA256

      1c0fccd61af0a8532b565c51b6d7770d49a4cffcb6564656aab402785094cf37

    • SHA512

      36609101726084c7721619381fec8c7492fe07db752151ffd7e5250c78e1e94fb69b585788efbbfb4e7fda88fe0964f5878dfb878a8c473018f33610c2be0e8e

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//0:vCjsIOtEvwDpj5H9YvQd2RG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks