Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_e00e4b3a17e757feeb88ecc8f796db03_cryptolocker

  • Size

    31KB

  • Sample

    240214-lx2htsge35

  • MD5

    e00e4b3a17e757feeb88ecc8f796db03

  • SHA1

    546637e7c41cdb01d1e37aeb2d710cee8c00715b

  • SHA256

    4cb06ee27a163cdbf10131d58a19a0b930ba0048b818de4725d766a81aa7a32d

  • SHA512

    3f738250d652be0df438fa50ae245a021570bb04808af4b3b02a3f4f80eccab4e2f27a922c93755ca52c8931338cbe7b8f2a28c3cfedd203b413a79d1c855f37

  • SSDEEP

    768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHmNgq:q0zizzOSxMOtEvwDpj/arqcD

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_e00e4b3a17e757feeb88ecc8f796db03_cryptolocker

    • Size

      31KB

    • MD5

      e00e4b3a17e757feeb88ecc8f796db03

    • SHA1

      546637e7c41cdb01d1e37aeb2d710cee8c00715b

    • SHA256

      4cb06ee27a163cdbf10131d58a19a0b930ba0048b818de4725d766a81aa7a32d

    • SHA512

      3f738250d652be0df438fa50ae245a021570bb04808af4b3b02a3f4f80eccab4e2f27a922c93755ca52c8931338cbe7b8f2a28c3cfedd203b413a79d1c855f37

    • SSDEEP

      768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHmNgq:q0zizzOSxMOtEvwDpj/arqcD

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks