Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_4678e4192465e995a455ab82ac5d7d66_cryptolocker

  • Size

    37KB

  • Sample

    240204-x6wvgshaf8

  • MD5

    4678e4192465e995a455ab82ac5d7d66

  • SHA1

    7f55fcf4a1a37bb9927724c2de100ee6f28d6a9e

  • SHA256

    b1d3f1447461046ee4a2e7d827c04da36698cece7c89e1873b1f06bc3d7e0719

  • SHA512

    88319c36781a73bee938fc84565470373766875198cc54202509f7ac40fbb7bdf183001984940705e6845728cc2945b34863c22f5952a4346223bbae6f70c404

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXuni8LBE1:btB9g/WItCSsAGjX7e9N0hunLS1

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_4678e4192465e995a455ab82ac5d7d66_cryptolocker

    • Size

      37KB

    • MD5

      4678e4192465e995a455ab82ac5d7d66

    • SHA1

      7f55fcf4a1a37bb9927724c2de100ee6f28d6a9e

    • SHA256

      b1d3f1447461046ee4a2e7d827c04da36698cece7c89e1873b1f06bc3d7e0719

    • SHA512

      88319c36781a73bee938fc84565470373766875198cc54202509f7ac40fbb7bdf183001984940705e6845728cc2945b34863c22f5952a4346223bbae6f70c404

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXuni8LBE1:btB9g/WItCSsAGjX7e9N0hunLS1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks