Overview

overview

10

Static

static

10

2024-02-18...er.exe

windows7-x64

9

2024-02-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-18_ac2d3f51fd998cb51afe0ba0effb4717_cryptolocker

  • Size

    48KB

  • Sample

    240218-vbprkscd3z

  • MD5

    ac2d3f51fd998cb51afe0ba0effb4717

  • SHA1

    b180a123f459edb6b6add91853d79dcfbff74450

  • SHA256

    7e5939fa7d295e550eea03c48fb631d4f531707a6bd419f908ecac01bf55ad6b

  • SHA512

    05f47e9405da48f0d91d3c084bc62780bff138d3e6830dda319e8de0780123f4be4c2dbbc97d8a7bc4528978a2060030dc849c339162df434c9e14a9e5583657

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB52zg:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6u8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_ac2d3f51fd998cb51afe0ba0effb4717_cryptolocker

    • Size

      48KB

    • MD5

      ac2d3f51fd998cb51afe0ba0effb4717

    • SHA1

      b180a123f459edb6b6add91853d79dcfbff74450

    • SHA256

      7e5939fa7d295e550eea03c48fb631d4f531707a6bd419f908ecac01bf55ad6b

    • SHA512

      05f47e9405da48f0d91d3c084bc62780bff138d3e6830dda319e8de0780123f4be4c2dbbc97d8a7bc4528978a2060030dc849c339162df434c9e14a9e5583657

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB52zg:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6u8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks