Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_603f50e3e8f647631591d98fb0d14792_cryptolocker

  • Size

    31KB

  • Sample

    240129-s4ytvaeeeq

  • MD5

    603f50e3e8f647631591d98fb0d14792

  • SHA1

    01416d656c4c54765777fab447d53303c09e5b3c

  • SHA256

    b376e98c7301482f5041c46789cab66ccfb8b750f58f186aab955029402ec876

  • SHA512

    04348cd76fff7de0f5d446ae3c3cbaa271f9d2de8d6ca4f038fc5d13f9d5b1501fa6343ee2136e7a6ce8157db3b5ab4933bf13d8aec28f2f4582426a08c99cee

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bq:b7o/2n1TCraU6GD1a4Xt9g

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_603f50e3e8f647631591d98fb0d14792_cryptolocker

    • Size

      31KB

    • MD5

      603f50e3e8f647631591d98fb0d14792

    • SHA1

      01416d656c4c54765777fab447d53303c09e5b3c

    • SHA256

      b376e98c7301482f5041c46789cab66ccfb8b750f58f186aab955029402ec876

    • SHA512

      04348cd76fff7de0f5d446ae3c3cbaa271f9d2de8d6ca4f038fc5d13f9d5b1501fa6343ee2136e7a6ce8157db3b5ab4933bf13d8aec28f2f4582426a08c99cee

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bq:b7o/2n1TCraU6GD1a4Xt9g

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks