Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_e3956a8e8ffe81fca458f1f8d541c3b5_cryptolocker

  • Size

    55KB

  • Sample

    240212-wgq29scd62

  • MD5

    e3956a8e8ffe81fca458f1f8d541c3b5

  • SHA1

    35941d8c554ccbc36cc654c5c71a9bdb7e7cc12e

  • SHA256

    b440eb0ce2511ba9c8abb3fb0441b90fa1b01ab96f38010c22a8476eb754d9ac

  • SHA512

    89b720e97497f9f84f5ac5cd278de81656e71d56df8ccbcea1f5b8ad33036ddfa7ab5c61b82e56ce600a1d43e9f29ceb306ea5b91e66fcb53954cf48a7e18348

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb619:BbdDmjr+OtEvwDpjML

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_e3956a8e8ffe81fca458f1f8d541c3b5_cryptolocker

    • Size

      55KB

    • MD5

      e3956a8e8ffe81fca458f1f8d541c3b5

    • SHA1

      35941d8c554ccbc36cc654c5c71a9bdb7e7cc12e

    • SHA256

      b440eb0ce2511ba9c8abb3fb0441b90fa1b01ab96f38010c22a8476eb754d9ac

    • SHA512

      89b720e97497f9f84f5ac5cd278de81656e71d56df8ccbcea1f5b8ad33036ddfa7ab5c61b82e56ce600a1d43e9f29ceb306ea5b91e66fcb53954cf48a7e18348

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb619:BbdDmjr+OtEvwDpjML

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks