Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_2866e789939e5bbca7704be72035c85a_cryptolocker

  • Size

    53KB

  • Sample

    240129-pk2vlshfe7

  • MD5

    2866e789939e5bbca7704be72035c85a

  • SHA1

    0d3fc5d95dc01bdc217df111783aa30d9408149a

  • SHA256

    b0affe63d058038119f7bbeb47503a0c5f97322c3aba63d13ac6bbd760f4657f

  • SHA512

    8734b9d423f2fc068f0731f5e12c058232b7b355392cb2f42297bde4bcce29f69ae306b0d465dd2967a5ea4cdc5231a88bc802c7c6ebe3a426c775652e178ccf

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/Cdr:79mqyNhQMOtEvwDpjBPY7xv3g8q

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_2866e789939e5bbca7704be72035c85a_cryptolocker

    • Size

      53KB

    • MD5

      2866e789939e5bbca7704be72035c85a

    • SHA1

      0d3fc5d95dc01bdc217df111783aa30d9408149a

    • SHA256

      b0affe63d058038119f7bbeb47503a0c5f97322c3aba63d13ac6bbd760f4657f

    • SHA512

      8734b9d423f2fc068f0731f5e12c058232b7b355392cb2f42297bde4bcce29f69ae306b0d465dd2967a5ea4cdc5231a88bc802c7c6ebe3a426c775652e178ccf

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/Cdr:79mqyNhQMOtEvwDpjBPY7xv3g8q

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks