Overview

overview

10

Static

static

10

2024-02-01...er.exe

windows7-x64

9

2024-02-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_5e5fca34a2985db7e47f240b4587d25a_cryptolocker

  • Size

    48KB

  • Sample

    240201-swhsnaafcp

  • MD5

    5e5fca34a2985db7e47f240b4587d25a

  • SHA1

    b1e61412f4f0c007ed53b70944a4d190a509c1b0

  • SHA256

    28d15af47253c8e74cdc4ee24dc6bae93c510a08d33ecc7e8577b4e456bd1189

  • SHA512

    0dfa017c4563597c7dbc0b318e4e28651ee2d6bfee59b28c7298e4bb0b9e929b9c8cc5023a063f0e3c04045e157a2053e7d8cf1cab8fe5e3dcdcc94238f5f58a

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB52Y:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6uY

Score
10/10

Malware Config

Targets

    • Target

      2024-02-01_5e5fca34a2985db7e47f240b4587d25a_cryptolocker

    • Size

      48KB

    • MD5

      5e5fca34a2985db7e47f240b4587d25a

    • SHA1

      b1e61412f4f0c007ed53b70944a4d190a509c1b0

    • SHA256

      28d15af47253c8e74cdc4ee24dc6bae93c510a08d33ecc7e8577b4e456bd1189

    • SHA512

      0dfa017c4563597c7dbc0b318e4e28651ee2d6bfee59b28c7298e4bb0b9e929b9c8cc5023a063f0e3c04045e157a2053e7d8cf1cab8fe5e3dcdcc94238f5f58a

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB52Y:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6uY

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks