Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-17_5fb8a8f60128d1a40b4d54e489247f10_cryptolocker

  • Size

    59KB

  • Sample

    240217-v334aahf27

  • MD5

    5fb8a8f60128d1a40b4d54e489247f10

  • SHA1

    1b2595c5854854dc0116b0ed3b18855deaf8b7c0

  • SHA256

    8f157bef8f9182b27e02ed403653623ee072405c77fd5c24a109eaf4121223c5

  • SHA512

    747c8d887c91d106d4d8b869e8a18172831ceeb7a5e05acf5678c9af74050debd4d17cf58990a39184891a7166957c09e5d522fe65386dcab82aca0dcea3575c

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgts5:BbdDmjr+OtEvwDpjM8h

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_5fb8a8f60128d1a40b4d54e489247f10_cryptolocker

    • Size

      59KB

    • MD5

      5fb8a8f60128d1a40b4d54e489247f10

    • SHA1

      1b2595c5854854dc0116b0ed3b18855deaf8b7c0

    • SHA256

      8f157bef8f9182b27e02ed403653623ee072405c77fd5c24a109eaf4121223c5

    • SHA512

      747c8d887c91d106d4d8b869e8a18172831ceeb7a5e05acf5678c9af74050debd4d17cf58990a39184891a7166957c09e5d522fe65386dcab82aca0dcea3575c

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgts5:BbdDmjr+OtEvwDpjM8h

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks