Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_319d2f9a8e6c54f1f1331fe87363ea61_cryptolocker

  • Size

    49KB

  • Sample

    240219-y82n7ace7x

  • MD5

    319d2f9a8e6c54f1f1331fe87363ea61

  • SHA1

    09a0a48ed8596339de750456674c296bb366699e

  • SHA256

    53c7c0a4722b2d0cb1f2a31d5016bb9592f020e76a07e930c3006a603d788911

  • SHA512

    db074a8a7211d527ee8ab241ff168a76cbeccfad43ed3c434c5bcc6094d64219303a5b4f2095d7be5081ecc33add44d29bca812589903d244a4ced37fa2734cb

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQPdUvY:BbdDmjr+OtEvwDpjMXZ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_319d2f9a8e6c54f1f1331fe87363ea61_cryptolocker

    • Size

      49KB

    • MD5

      319d2f9a8e6c54f1f1331fe87363ea61

    • SHA1

      09a0a48ed8596339de750456674c296bb366699e

    • SHA256

      53c7c0a4722b2d0cb1f2a31d5016bb9592f020e76a07e930c3006a603d788911

    • SHA512

      db074a8a7211d527ee8ab241ff168a76cbeccfad43ed3c434c5bcc6094d64219303a5b4f2095d7be5081ecc33add44d29bca812589903d244a4ced37fa2734cb

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQPdUvY:BbdDmjr+OtEvwDpjMXZ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks