Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_64f15beaa1b5232168e8c393331931f8_cryptolocker

  • Size

    32KB

  • Sample

    240204-by1yksedb9

  • MD5

    64f15beaa1b5232168e8c393331931f8

  • SHA1

    e61b6b71df1b2f46fc0efc9f3e05e6b6a9fdbd20

  • SHA256

    4db6fc156283554b32455c09a13d05e6658cfd6efd0533125f969e0d107dad30

  • SHA512

    63d656006458d8ae96475373b398a2a58bf26da1cec022a916b2d17939c8358e44aa7508bb2dd19b522ed405f087ae605da9f99e3878a0be339db0fea7450e7e

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlz5Ks:bA74zYcgT/Ekd0ryfjPIunYHKs

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_64f15beaa1b5232168e8c393331931f8_cryptolocker

    • Size

      32KB

    • MD5

      64f15beaa1b5232168e8c393331931f8

    • SHA1

      e61b6b71df1b2f46fc0efc9f3e05e6b6a9fdbd20

    • SHA256

      4db6fc156283554b32455c09a13d05e6658cfd6efd0533125f969e0d107dad30

    • SHA512

      63d656006458d8ae96475373b398a2a58bf26da1cec022a916b2d17939c8358e44aa7508bb2dd19b522ed405f087ae605da9f99e3878a0be339db0fea7450e7e

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlz5Ks:bA74zYcgT/Ekd0ryfjPIunYHKs

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks