Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_26e452107480dd1f5f5253c9afc3b694_cryptolocker

  • Size

    36KB

  • Sample

    240214-rtlk4aeb57

  • MD5

    26e452107480dd1f5f5253c9afc3b694

  • SHA1

    4664d94b6f3c6b5e4b0258f2e809cf219155912b

  • SHA256

    829a0a0f730fe1bed752523efa114f25ae50269bba3498aecb784cf6c642ba1f

  • SHA512

    71aed56bacf4c2ec48ac1168e000a01aaa2605174387dfc3514fc5b064983e94097a28ea3963d5c68faa378696b8645b2c6272f907f16228c0eb9744681d7ed5

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRY9:vj+jsMQMOtEvwDpj5HcSY9

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_26e452107480dd1f5f5253c9afc3b694_cryptolocker

    • Size

      36KB

    • MD5

      26e452107480dd1f5f5253c9afc3b694

    • SHA1

      4664d94b6f3c6b5e4b0258f2e809cf219155912b

    • SHA256

      829a0a0f730fe1bed752523efa114f25ae50269bba3498aecb784cf6c642ba1f

    • SHA512

      71aed56bacf4c2ec48ac1168e000a01aaa2605174387dfc3514fc5b064983e94097a28ea3963d5c68faa378696b8645b2c6272f907f16228c0eb9744681d7ed5

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRY9:vj+jsMQMOtEvwDpj5HcSY9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks