Overview

overview

10

Static

static

10

2024-02-13...er.exe

windows7-x64

9

2024-02-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-13_4dccbc305cbc3abac0fc9dd6c504a0e0_cryptolocker

  • Size

    62KB

  • Sample

    240213-rv6yesbh91

  • MD5

    4dccbc305cbc3abac0fc9dd6c504a0e0

  • SHA1

    9a8695e1d231f68110bf6b40570b59feae8afe94

  • SHA256

    b0f428e57f68d9260c2dd089a912576cd28e4c9415a177b963e6dfd4e8643849

  • SHA512

    dd0dee007e1fb5d6b034dd3a84b5a277f88f9eeba3b6e1102a91fb9ea022cb651f5ea1d332a25c1f3f9fca161e70132d7f2ba4348e054512778b593cf508ae90

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgts+:BbdDmjr+OtEvwDpjM8m

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_4dccbc305cbc3abac0fc9dd6c504a0e0_cryptolocker

    • Size

      62KB

    • MD5

      4dccbc305cbc3abac0fc9dd6c504a0e0

    • SHA1

      9a8695e1d231f68110bf6b40570b59feae8afe94

    • SHA256

      b0f428e57f68d9260c2dd089a912576cd28e4c9415a177b963e6dfd4e8643849

    • SHA512

      dd0dee007e1fb5d6b034dd3a84b5a277f88f9eeba3b6e1102a91fb9ea022cb651f5ea1d332a25c1f3f9fca161e70132d7f2ba4348e054512778b593cf508ae90

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgts+:BbdDmjr+OtEvwDpjM8m

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks