Overview

overview

10

Static

static

10

2024-02-20...er.exe

windows7-x64

9

2024-02-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-20_a851d7322cb5c8e0ce708b889b25a9f5_cryptolocker

  • Size

    98KB

  • Sample

    240220-pwmj3agb8x

  • MD5

    a851d7322cb5c8e0ce708b889b25a9f5

  • SHA1

    c26652b2f784c3ad54948ac3939f6e6b256cf5b2

  • SHA256

    5c6b7e8ca85cfcb72a87e10581947793ce90d63fbcb6fb0bf5296bc0921af41d

  • SHA512

    7f228fbafb20b9468329c7a6866f4d969496ce5ecffd1adbe2f0e3b8140cef8d0b68cfa0e26524513c31b0f9fe07ac0a1734b67f5b588e8dcf08fe79e92782ee

  • SSDEEP

    1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCJ3:26a+2OtEvwDpjtzu

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_a851d7322cb5c8e0ce708b889b25a9f5_cryptolocker

    • Size

      98KB

    • MD5

      a851d7322cb5c8e0ce708b889b25a9f5

    • SHA1

      c26652b2f784c3ad54948ac3939f6e6b256cf5b2

    • SHA256

      5c6b7e8ca85cfcb72a87e10581947793ce90d63fbcb6fb0bf5296bc0921af41d

    • SHA512

      7f228fbafb20b9468329c7a6866f4d969496ce5ecffd1adbe2f0e3b8140cef8d0b68cfa0e26524513c31b0f9fe07ac0a1734b67f5b588e8dcf08fe79e92782ee

    • SSDEEP

      1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCJ3:26a+2OtEvwDpjtzu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks