Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_c7b04465809e78ccb109d51bca4a7298_cryptolocker

  • Size

    30KB

  • Sample

    240204-b5gtaahahp

  • MD5

    c7b04465809e78ccb109d51bca4a7298

  • SHA1

    fbe3dc8a4aae6b0517c3154d247039a4a3a06420

  • SHA256

    963befc1796857837f0d605eed915e8c78ad9f9d3317d453eeb1522523dec010

  • SHA512

    059f44ffc0e3ebbb09d558c426ed95b9a8148de7580321061a4b67aed5f933b2e1780803a31304fff246166653e944832d3788ed738286ab44d18c50c5199f1b

  • SSDEEP

    768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+jHE:q0zizzOSxMOtEvwDpj/ar1E

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_c7b04465809e78ccb109d51bca4a7298_cryptolocker

    • Size

      30KB

    • MD5

      c7b04465809e78ccb109d51bca4a7298

    • SHA1

      fbe3dc8a4aae6b0517c3154d247039a4a3a06420

    • SHA256

      963befc1796857837f0d605eed915e8c78ad9f9d3317d453eeb1522523dec010

    • SHA512

      059f44ffc0e3ebbb09d558c426ed95b9a8148de7580321061a4b67aed5f933b2e1780803a31304fff246166653e944832d3788ed738286ab44d18c50c5199f1b

    • SSDEEP

      768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+jHE:q0zizzOSxMOtEvwDpj/ar1E

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks